buildsecurity.twirp.go

// Code generated by protoc-gen-twirp v8.1.1, DO NOT EDIT.
// source: buildsecurity.proto

package buildsecurity

import context "context"
import fmt "fmt"
import http "net/http"
import ioutil "io/ioutil"
import json "encoding/json"
import strconv "strconv"
import strings "strings"

import protojson "google.golang.org/protobuf/encoding/protojson"
import proto "google.golang.org/protobuf/proto"
import twirp "github.com/twitchtv/twirp"
import ctxsetters "github.com/twitchtv/twirp/ctxsetters"

import bytes "bytes"
import errors "errors"
import io "io"
import path "path"
import url "net/url"

// Version compatibility assertion.
// If the constant is not defined in the package, that likely means
// the package needs to be updated to work with this generated code.
// See https://twitchtv.github.io/twirp/docs/version_matrix.html
const _ = twirp.TwirpPackageMinVersion_8_1_0

// =======================
// BuildSecurity Interface
// =======================

type BuildSecurity interface {
	LookupRepository(context.Context, *LookupRepositoryReq) (*LookupRepositoryResp, error)

	CreateRepository(context.Context, *CreateRepositoryReq) (*CreateRepositoryResp, error)

	GetPolicies(context.Context, *GetPoliciesReq) (*GetPoliciesResp, error)

	CreateScan(context.Context, *CreateScanReq) (*CreateScanResp, error)
}

// =============================
// BuildSecurity Protobuf Client
// =============================

type buildSecurityProtobufClient struct {
	client      HTTPClient
	urls        [4]string
	interceptor twirp.Interceptor
	opts        twirp.ClientOptions
}

// NewBuildSecurityProtobufClient creates a Protobuf client that implements the BuildSecurity interface.
// It communicates using Protobuf and can be configured with a custom HTTPClient.
func NewBuildSecurityProtobufClient(baseURL string, client HTTPClient, opts ...twirp.ClientOption) BuildSecurity {
	if c, ok := client.(*http.Client); ok {
		client = withoutRedirects(c)
	}

	clientOpts := twirp.ClientOptions{}
	for _, o := range opts {
		o(&clientOpts)
	}

	// Using ReadOpt allows backwards and forwads compatibility with new options in the future
	literalURLs := false
	_ = clientOpts.ReadOpt("literalURLs", &literalURLs)
	var pathPrefix string
	if ok := clientOpts.ReadOpt("pathPrefix", &pathPrefix); !ok {
		pathPrefix = "/twirp" // default prefix
	}

	// Build method URLs: <baseURL>[<prefix>]/<package>.<Service>/<Method>
	serviceURL := sanitizeBaseURL(baseURL)
	serviceURL += baseServicePath(pathPrefix, "buildsecurity", "BuildSecurity")
	urls := [4]string{
		serviceURL + "LookupRepository",
		serviceURL + "CreateRepository",
		serviceURL + "GetPolicies",
		serviceURL + "CreateScan",
	}

	return &buildSecurityProtobufClient{
		client:      client,
		urls:        urls,
		interceptor: twirp.ChainInterceptors(clientOpts.Interceptors...),
		opts:        clientOpts,
	}
}

func (c *buildSecurityProtobufClient) LookupRepository(ctx context.Context, in *LookupRepositoryReq) (*LookupRepositoryResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "LookupRepository")
	caller := c.callLookupRepository
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *LookupRepositoryReq) (*LookupRepositoryResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*LookupRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*LookupRepositoryReq) when calling interceptor")
					}
					return c.callLookupRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*LookupRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*LookupRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityProtobufClient) callLookupRepository(ctx context.Context, in *LookupRepositoryReq) (*LookupRepositoryResp, error) {
	out := new(LookupRepositoryResp)
	ctx, err := doProtobufRequest(ctx, c.client, c.opts.Hooks, c.urls[0], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

func (c *buildSecurityProtobufClient) CreateRepository(ctx context.Context, in *CreateRepositoryReq) (*CreateRepositoryResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "CreateRepository")
	caller := c.callCreateRepository
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *CreateRepositoryReq) (*CreateRepositoryResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateRepositoryReq) when calling interceptor")
					}
					return c.callCreateRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityProtobufClient) callCreateRepository(ctx context.Context, in *CreateRepositoryReq) (*CreateRepositoryResp, error) {
	out := new(CreateRepositoryResp)
	ctx, err := doProtobufRequest(ctx, c.client, c.opts.Hooks, c.urls[1], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

func (c *buildSecurityProtobufClient) GetPolicies(ctx context.Context, in *GetPoliciesReq) (*GetPoliciesResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "GetPolicies")
	caller := c.callGetPolicies
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *GetPoliciesReq) (*GetPoliciesResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*GetPoliciesReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*GetPoliciesReq) when calling interceptor")
					}
					return c.callGetPolicies(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*GetPoliciesResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*GetPoliciesResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityProtobufClient) callGetPolicies(ctx context.Context, in *GetPoliciesReq) (*GetPoliciesResp, error) {
	out := new(GetPoliciesResp)
	ctx, err := doProtobufRequest(ctx, c.client, c.opts.Hooks, c.urls[2], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

func (c *buildSecurityProtobufClient) CreateScan(ctx context.Context, in *CreateScanReq) (*CreateScanResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "CreateScan")
	caller := c.callCreateScan
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *CreateScanReq) (*CreateScanResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateScanReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateScanReq) when calling interceptor")
					}
					return c.callCreateScan(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateScanResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateScanResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityProtobufClient) callCreateScan(ctx context.Context, in *CreateScanReq) (*CreateScanResp, error) {
	out := new(CreateScanResp)
	ctx, err := doProtobufRequest(ctx, c.client, c.opts.Hooks, c.urls[3], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

// =========================
// BuildSecurity JSON Client
// =========================

type buildSecurityJSONClient struct {
	client      HTTPClient
	urls        [4]string
	interceptor twirp.Interceptor
	opts        twirp.ClientOptions
}

// NewBuildSecurityJSONClient creates a JSON client that implements the BuildSecurity interface.
// It communicates using JSON and can be configured with a custom HTTPClient.
func NewBuildSecurityJSONClient(baseURL string, client HTTPClient, opts ...twirp.ClientOption) BuildSecurity {
	if c, ok := client.(*http.Client); ok {
		client = withoutRedirects(c)
	}

	clientOpts := twirp.ClientOptions{}
	for _, o := range opts {
		o(&clientOpts)
	}

	// Using ReadOpt allows backwards and forwads compatibility with new options in the future
	literalURLs := false
	_ = clientOpts.ReadOpt("literalURLs", &literalURLs)
	var pathPrefix string
	if ok := clientOpts.ReadOpt("pathPrefix", &pathPrefix); !ok {
		pathPrefix = "/twirp" // default prefix
	}

	// Build method URLs: <baseURL>[<prefix>]/<package>.<Service>/<Method>
	serviceURL := sanitizeBaseURL(baseURL)
	serviceURL += baseServicePath(pathPrefix, "buildsecurity", "BuildSecurity")
	urls := [4]string{
		serviceURL + "LookupRepository",
		serviceURL + "CreateRepository",
		serviceURL + "GetPolicies",
		serviceURL + "CreateScan",
	}

	return &buildSecurityJSONClient{
		client:      client,
		urls:        urls,
		interceptor: twirp.ChainInterceptors(clientOpts.Interceptors...),
		opts:        clientOpts,
	}
}

func (c *buildSecurityJSONClient) LookupRepository(ctx context.Context, in *LookupRepositoryReq) (*LookupRepositoryResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "LookupRepository")
	caller := c.callLookupRepository
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *LookupRepositoryReq) (*LookupRepositoryResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*LookupRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*LookupRepositoryReq) when calling interceptor")
					}
					return c.callLookupRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*LookupRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*LookupRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityJSONClient) callLookupRepository(ctx context.Context, in *LookupRepositoryReq) (*LookupRepositoryResp, error) {
	out := new(LookupRepositoryResp)
	ctx, err := doJSONRequest(ctx, c.client, c.opts.Hooks, c.urls[0], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

func (c *buildSecurityJSONClient) CreateRepository(ctx context.Context, in *CreateRepositoryReq) (*CreateRepositoryResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "CreateRepository")
	caller := c.callCreateRepository
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *CreateRepositoryReq) (*CreateRepositoryResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateRepositoryReq) when calling interceptor")
					}
					return c.callCreateRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityJSONClient) callCreateRepository(ctx context.Context, in *CreateRepositoryReq) (*CreateRepositoryResp, error) {
	out := new(CreateRepositoryResp)
	ctx, err := doJSONRequest(ctx, c.client, c.opts.Hooks, c.urls[1], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

func (c *buildSecurityJSONClient) GetPolicies(ctx context.Context, in *GetPoliciesReq) (*GetPoliciesResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "GetPolicies")
	caller := c.callGetPolicies
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *GetPoliciesReq) (*GetPoliciesResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*GetPoliciesReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*GetPoliciesReq) when calling interceptor")
					}
					return c.callGetPolicies(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*GetPoliciesResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*GetPoliciesResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityJSONClient) callGetPolicies(ctx context.Context, in *GetPoliciesReq) (*GetPoliciesResp, error) {
	out := new(GetPoliciesResp)
	ctx, err := doJSONRequest(ctx, c.client, c.opts.Hooks, c.urls[2], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

func (c *buildSecurityJSONClient) CreateScan(ctx context.Context, in *CreateScanReq) (*CreateScanResp, error) {
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithMethodName(ctx, "CreateScan")
	caller := c.callCreateScan
	if c.interceptor != nil {
		caller = func(ctx context.Context, req *CreateScanReq) (*CreateScanResp, error) {
			resp, err := c.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateScanReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateScanReq) when calling interceptor")
					}
					return c.callCreateScan(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateScanResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateScanResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}
	return caller(ctx, in)
}

func (c *buildSecurityJSONClient) callCreateScan(ctx context.Context, in *CreateScanReq) (*CreateScanResp, error) {
	out := new(CreateScanResp)
	ctx, err := doJSONRequest(ctx, c.client, c.opts.Hooks, c.urls[3], in, out)
	if err != nil {
		twerr, ok := err.(twirp.Error)
		if !ok {
			twerr = twirp.InternalErrorWith(err)
		}
		callClientError(ctx, c.opts.Hooks, twerr)
		return nil, err
	}

	callClientResponseReceived(ctx, c.opts.Hooks)

	return out, nil
}

// ============================
// BuildSecurity Server Handler
// ============================

type buildSecurityServer struct {
	BuildSecurity
	interceptor      twirp.Interceptor
	hooks            *twirp.ServerHooks
	pathPrefix       string // prefix for routing
	jsonSkipDefaults bool   // do not include unpopulated fields (default values) in the response
	jsonCamelCase    bool   // JSON fields are serialized as lowerCamelCase rather than keeping the original proto names
}

// NewBuildSecurityServer builds a TwirpServer that can be used as an http.Handler to handle
// HTTP requests that are routed to the right method in the provided svc implementation.
// The opts are twirp.ServerOption modifiers, for example twirp.WithServerHooks(hooks).
func NewBuildSecurityServer(svc BuildSecurity, opts ...interface{}) TwirpServer {
	serverOpts := newServerOpts(opts)

	// Using ReadOpt allows backwards and forwads compatibility with new options in the future
	jsonSkipDefaults := false
	_ = serverOpts.ReadOpt("jsonSkipDefaults", &jsonSkipDefaults)
	jsonCamelCase := false
	_ = serverOpts.ReadOpt("jsonCamelCase", &jsonCamelCase)
	var pathPrefix string
	if ok := serverOpts.ReadOpt("pathPrefix", &pathPrefix); !ok {
		pathPrefix = "/twirp" // default prefix
	}

	return &buildSecurityServer{
		BuildSecurity:    svc,
		hooks:            serverOpts.Hooks,
		interceptor:      twirp.ChainInterceptors(serverOpts.Interceptors...),
		pathPrefix:       pathPrefix,
		jsonSkipDefaults: jsonSkipDefaults,
		jsonCamelCase:    jsonCamelCase,
	}
}

// writeError writes an HTTP response with a valid Twirp error format, and triggers hooks.
// If err is not a twirp.Error, it will get wrapped with twirp.InternalErrorWith(err)
func (s *buildSecurityServer) writeError(ctx context.Context, resp http.ResponseWriter, err error) {
	writeError(ctx, resp, err, s.hooks)
}

// handleRequestBodyError is used to handle error when the twirp server cannot read request
func (s *buildSecurityServer) handleRequestBodyError(ctx context.Context, resp http.ResponseWriter, msg string, err error) {
	if context.Canceled == ctx.Err() {
		s.writeError(ctx, resp, twirp.NewError(twirp.Canceled, "failed to read request: context canceled"))
		return
	}
	if context.DeadlineExceeded == ctx.Err() {
		s.writeError(ctx, resp, twirp.NewError(twirp.DeadlineExceeded, "failed to read request: deadline exceeded"))
		return
	}
	s.writeError(ctx, resp, twirp.WrapError(malformedRequestError(msg), err))
}

// BuildSecurityPathPrefix is a convenience constant that may identify URL paths.
// Should be used with caution, it only matches routes generated by Twirp Go clients,
// with the default "/twirp" prefix and default CamelCase service and method names.
// More info: https://twitchtv.github.io/twirp/docs/routing.html
const BuildSecurityPathPrefix = "/twirp/buildsecurity.BuildSecurity/"

func (s *buildSecurityServer) ServeHTTP(resp http.ResponseWriter, req *http.Request) {
	ctx := req.Context()
	ctx = ctxsetters.WithPackageName(ctx, "buildsecurity")
	ctx = ctxsetters.WithServiceName(ctx, "BuildSecurity")
	ctx = ctxsetters.WithResponseWriter(ctx, resp)

	var err error
	ctx, err = callRequestReceived(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	if req.Method != "POST" {
		msg := fmt.Sprintf("unsupported method %q (only POST is allowed)", req.Method)
		s.writeError(ctx, resp, badRouteError(msg, req.Method, req.URL.Path))
		return
	}

	// Verify path format: [<prefix>]/<package>.<Service>/<Method>
	prefix, pkgService, method := parseTwirpPath(req.URL.Path)
	if pkgService != "buildsecurity.BuildSecurity" {
		msg := fmt.Sprintf("no handler for path %q", req.URL.Path)
		s.writeError(ctx, resp, badRouteError(msg, req.Method, req.URL.Path))
		return
	}
	if prefix != s.pathPrefix {
		msg := fmt.Sprintf("invalid path prefix %q, expected %q, on path %q", prefix, s.pathPrefix, req.URL.Path)
		s.writeError(ctx, resp, badRouteError(msg, req.Method, req.URL.Path))
		return
	}

	switch method {
	case "LookupRepository":
		s.serveLookupRepository(ctx, resp, req)
		return
	case "CreateRepository":
		s.serveCreateRepository(ctx, resp, req)
		return
	case "GetPolicies":
		s.serveGetPolicies(ctx, resp, req)
		return
	case "CreateScan":
		s.serveCreateScan(ctx, resp, req)
		return
	default:
		msg := fmt.Sprintf("no handler for path %q", req.URL.Path)
		s.writeError(ctx, resp, badRouteError(msg, req.Method, req.URL.Path))
		return
	}
}

func (s *buildSecurityServer) serveLookupRepository(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	header := req.Header.Get("Content-Type")
	i := strings.Index(header, ";")
	if i == -1 {
		i = len(header)
	}
	switch strings.TrimSpace(strings.ToLower(header[:i])) {
	case "application/json":
		s.serveLookupRepositoryJSON(ctx, resp, req)
	case "application/protobuf":
		s.serveLookupRepositoryProtobuf(ctx, resp, req)
	default:
		msg := fmt.Sprintf("unexpected Content-Type: %q", req.Header.Get("Content-Type"))
		twerr := badRouteError(msg, req.Method, req.URL.Path)
		s.writeError(ctx, resp, twerr)
	}
}

func (s *buildSecurityServer) serveLookupRepositoryJSON(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "LookupRepository")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	d := json.NewDecoder(req.Body)
	rawReqBody := json.RawMessage{}
	if err := d.Decode(&rawReqBody); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}
	reqContent := new(LookupRepositoryReq)
	unmarshaler := protojson.UnmarshalOptions{DiscardUnknown: true}
	if err = unmarshaler.Unmarshal(rawReqBody, reqContent); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}

	handler := s.BuildSecurity.LookupRepository
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *LookupRepositoryReq) (*LookupRepositoryResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*LookupRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*LookupRepositoryReq) when calling interceptor")
					}
					return s.BuildSecurity.LookupRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*LookupRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*LookupRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *LookupRepositoryResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *LookupRepositoryResp and nil error while calling LookupRepository. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	marshaler := &protojson.MarshalOptions{UseProtoNames: !s.jsonCamelCase, EmitUnpopulated: !s.jsonSkipDefaults}
	respBytes, err := marshaler.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal json response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/json")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)

	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveLookupRepositoryProtobuf(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "LookupRepository")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	buf, err := ioutil.ReadAll(req.Body)
	if err != nil {
		s.handleRequestBodyError(ctx, resp, "failed to read request body", err)
		return
	}
	reqContent := new(LookupRepositoryReq)
	if err = proto.Unmarshal(buf, reqContent); err != nil {
		s.writeError(ctx, resp, malformedRequestError("the protobuf request could not be decoded"))
		return
	}

	handler := s.BuildSecurity.LookupRepository
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *LookupRepositoryReq) (*LookupRepositoryResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*LookupRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*LookupRepositoryReq) when calling interceptor")
					}
					return s.BuildSecurity.LookupRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*LookupRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*LookupRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *LookupRepositoryResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *LookupRepositoryResp and nil error while calling LookupRepository. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	respBytes, err := proto.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal proto response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/protobuf")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)
	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveCreateRepository(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	header := req.Header.Get("Content-Type")
	i := strings.Index(header, ";")
	if i == -1 {
		i = len(header)
	}
	switch strings.TrimSpace(strings.ToLower(header[:i])) {
	case "application/json":
		s.serveCreateRepositoryJSON(ctx, resp, req)
	case "application/protobuf":
		s.serveCreateRepositoryProtobuf(ctx, resp, req)
	default:
		msg := fmt.Sprintf("unexpected Content-Type: %q", req.Header.Get("Content-Type"))
		twerr := badRouteError(msg, req.Method, req.URL.Path)
		s.writeError(ctx, resp, twerr)
	}
}

func (s *buildSecurityServer) serveCreateRepositoryJSON(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "CreateRepository")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	d := json.NewDecoder(req.Body)
	rawReqBody := json.RawMessage{}
	if err := d.Decode(&rawReqBody); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}
	reqContent := new(CreateRepositoryReq)
	unmarshaler := protojson.UnmarshalOptions{DiscardUnknown: true}
	if err = unmarshaler.Unmarshal(rawReqBody, reqContent); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}

	handler := s.BuildSecurity.CreateRepository
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *CreateRepositoryReq) (*CreateRepositoryResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateRepositoryReq) when calling interceptor")
					}
					return s.BuildSecurity.CreateRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *CreateRepositoryResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *CreateRepositoryResp and nil error while calling CreateRepository. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	marshaler := &protojson.MarshalOptions{UseProtoNames: !s.jsonCamelCase, EmitUnpopulated: !s.jsonSkipDefaults}
	respBytes, err := marshaler.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal json response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/json")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)

	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveCreateRepositoryProtobuf(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "CreateRepository")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	buf, err := ioutil.ReadAll(req.Body)
	if err != nil {
		s.handleRequestBodyError(ctx, resp, "failed to read request body", err)
		return
	}
	reqContent := new(CreateRepositoryReq)
	if err = proto.Unmarshal(buf, reqContent); err != nil {
		s.writeError(ctx, resp, malformedRequestError("the protobuf request could not be decoded"))
		return
	}

	handler := s.BuildSecurity.CreateRepository
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *CreateRepositoryReq) (*CreateRepositoryResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateRepositoryReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateRepositoryReq) when calling interceptor")
					}
					return s.BuildSecurity.CreateRepository(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateRepositoryResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateRepositoryResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *CreateRepositoryResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *CreateRepositoryResp and nil error while calling CreateRepository. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	respBytes, err := proto.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal proto response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/protobuf")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)
	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveGetPolicies(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	header := req.Header.Get("Content-Type")
	i := strings.Index(header, ";")
	if i == -1 {
		i = len(header)
	}
	switch strings.TrimSpace(strings.ToLower(header[:i])) {
	case "application/json":
		s.serveGetPoliciesJSON(ctx, resp, req)
	case "application/protobuf":
		s.serveGetPoliciesProtobuf(ctx, resp, req)
	default:
		msg := fmt.Sprintf("unexpected Content-Type: %q", req.Header.Get("Content-Type"))
		twerr := badRouteError(msg, req.Method, req.URL.Path)
		s.writeError(ctx, resp, twerr)
	}
}

func (s *buildSecurityServer) serveGetPoliciesJSON(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "GetPolicies")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	d := json.NewDecoder(req.Body)
	rawReqBody := json.RawMessage{}
	if err := d.Decode(&rawReqBody); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}
	reqContent := new(GetPoliciesReq)
	unmarshaler := protojson.UnmarshalOptions{DiscardUnknown: true}
	if err = unmarshaler.Unmarshal(rawReqBody, reqContent); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}

	handler := s.BuildSecurity.GetPolicies
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *GetPoliciesReq) (*GetPoliciesResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*GetPoliciesReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*GetPoliciesReq) when calling interceptor")
					}
					return s.BuildSecurity.GetPolicies(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*GetPoliciesResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*GetPoliciesResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *GetPoliciesResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *GetPoliciesResp and nil error while calling GetPolicies. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	marshaler := &protojson.MarshalOptions{UseProtoNames: !s.jsonCamelCase, EmitUnpopulated: !s.jsonSkipDefaults}
	respBytes, err := marshaler.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal json response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/json")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)

	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveGetPoliciesProtobuf(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "GetPolicies")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	buf, err := ioutil.ReadAll(req.Body)
	if err != nil {
		s.handleRequestBodyError(ctx, resp, "failed to read request body", err)
		return
	}
	reqContent := new(GetPoliciesReq)
	if err = proto.Unmarshal(buf, reqContent); err != nil {
		s.writeError(ctx, resp, malformedRequestError("the protobuf request could not be decoded"))
		return
	}

	handler := s.BuildSecurity.GetPolicies
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *GetPoliciesReq) (*GetPoliciesResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*GetPoliciesReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*GetPoliciesReq) when calling interceptor")
					}
					return s.BuildSecurity.GetPolicies(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*GetPoliciesResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*GetPoliciesResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *GetPoliciesResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *GetPoliciesResp and nil error while calling GetPolicies. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	respBytes, err := proto.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal proto response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/protobuf")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)
	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveCreateScan(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	header := req.Header.Get("Content-Type")
	i := strings.Index(header, ";")
	if i == -1 {
		i = len(header)
	}
	switch strings.TrimSpace(strings.ToLower(header[:i])) {
	case "application/json":
		s.serveCreateScanJSON(ctx, resp, req)
	case "application/protobuf":
		s.serveCreateScanProtobuf(ctx, resp, req)
	default:
		msg := fmt.Sprintf("unexpected Content-Type: %q", req.Header.Get("Content-Type"))
		twerr := badRouteError(msg, req.Method, req.URL.Path)
		s.writeError(ctx, resp, twerr)
	}
}

func (s *buildSecurityServer) serveCreateScanJSON(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "CreateScan")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	d := json.NewDecoder(req.Body)
	rawReqBody := json.RawMessage{}
	if err := d.Decode(&rawReqBody); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}
	reqContent := new(CreateScanReq)
	unmarshaler := protojson.UnmarshalOptions{DiscardUnknown: true}
	if err = unmarshaler.Unmarshal(rawReqBody, reqContent); err != nil {
		s.handleRequestBodyError(ctx, resp, "the json request could not be decoded", err)
		return
	}

	handler := s.BuildSecurity.CreateScan
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *CreateScanReq) (*CreateScanResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateScanReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateScanReq) when calling interceptor")
					}
					return s.BuildSecurity.CreateScan(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateScanResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateScanResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *CreateScanResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *CreateScanResp and nil error while calling CreateScan. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	marshaler := &protojson.MarshalOptions{UseProtoNames: !s.jsonCamelCase, EmitUnpopulated: !s.jsonSkipDefaults}
	respBytes, err := marshaler.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal json response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/json")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)

	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) serveCreateScanProtobuf(ctx context.Context, resp http.ResponseWriter, req *http.Request) {
	var err error
	ctx = ctxsetters.WithMethodName(ctx, "CreateScan")
	ctx, err = callRequestRouted(ctx, s.hooks)
	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}

	buf, err := ioutil.ReadAll(req.Body)
	if err != nil {
		s.handleRequestBodyError(ctx, resp, "failed to read request body", err)
		return
	}
	reqContent := new(CreateScanReq)
	if err = proto.Unmarshal(buf, reqContent); err != nil {
		s.writeError(ctx, resp, malformedRequestError("the protobuf request could not be decoded"))
		return
	}

	handler := s.BuildSecurity.CreateScan
	if s.interceptor != nil {
		handler = func(ctx context.Context, req *CreateScanReq) (*CreateScanResp, error) {
			resp, err := s.interceptor(
				func(ctx context.Context, req interface{}) (interface{}, error) {
					typedReq, ok := req.(*CreateScanReq)
					if !ok {
						return nil, twirp.InternalError("failed type assertion req.(*CreateScanReq) when calling interceptor")
					}
					return s.BuildSecurity.CreateScan(ctx, typedReq)
				},
			)(ctx, req)
			if resp != nil {
				typedResp, ok := resp.(*CreateScanResp)
				if !ok {
					return nil, twirp.InternalError("failed type assertion resp.(*CreateScanResp) when calling interceptor")
				}
				return typedResp, err
			}
			return nil, err
		}
	}

	// Call service method
	var respContent *CreateScanResp
	func() {
		defer ensurePanicResponses(ctx, resp, s.hooks)
		respContent, err = handler(ctx, reqContent)
	}()

	if err != nil {
		s.writeError(ctx, resp, err)
		return
	}
	if respContent == nil {
		s.writeError(ctx, resp, twirp.InternalError("received a nil *CreateScanResp and nil error while calling CreateScan. nil responses are not supported"))
		return
	}

	ctx = callResponsePrepared(ctx, s.hooks)

	respBytes, err := proto.Marshal(respContent)
	if err != nil {
		s.writeError(ctx, resp, wrapInternal(err, "failed to marshal proto response"))
		return
	}

	ctx = ctxsetters.WithStatusCode(ctx, http.StatusOK)
	resp.Header().Set("Content-Type", "application/protobuf")
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBytes)))
	resp.WriteHeader(http.StatusOK)
	if n, err := resp.Write(respBytes); err != nil {
		msg := fmt.Sprintf("failed to write response, %d of %d bytes written: %s", n, len(respBytes), err.Error())
		twerr := twirp.NewError(twirp.Unknown, msg)
		ctx = callError(ctx, s.hooks, twerr)
	}
	callResponseSent(ctx, s.hooks)
}

func (s *buildSecurityServer) ServiceDescriptor() ([]byte, int) {
	return twirpFileDescriptor0, 0
}

func (s *buildSecurityServer) ProtocGenTwirpVersion() string {
	return "v8.1.1"
}

// PathPrefix returns the base service path, in the form: "/<prefix>/<package>.<Service>/"
// that is everything in a Twirp route except for the <Method>. This can be used for routing,
// for example to identify the requests that are targeted to this service in a mux.
func (s *buildSecurityServer) PathPrefix() string {
	return baseServicePath(s.pathPrefix, "buildsecurity", "BuildSecurity")
}

// =====
// Utils
// =====

// HTTPClient is the interface used by generated clients to send HTTP requests.
// It is fulfilled by *(net/http).Client, which is sufficient for most users.
// Users can provide their own implementation for special retry policies.
//
// HTTPClient implementations should not follow redirects. Redirects are
// automatically disabled if *(net/http).Client is passed to client
// constructors. See the withoutRedirects function in this file for more
// details.
type HTTPClient interface {
	Do(req *http.Request) (*http.Response, error)
}

// TwirpServer is the interface generated server structs will support: they're
// HTTP handlers with additional methods for accessing metadata about the
// service. Those accessors are a low-level API for building reflection tools.
// Most people can think of TwirpServers as just http.Handlers.
type TwirpServer interface {
	http.Handler

	// ServiceDescriptor returns gzipped bytes describing the .proto file that
	// this service was generated from. Once unzipped, the bytes can be
	// unmarshalled as a
	// google.golang.org/protobuf/types/descriptorpb.FileDescriptorProto.
	//
	// The returned integer is the index of this particular service within that
	// FileDescriptorProto's 'Service' slice of ServiceDescriptorProtos. This is a
	// low-level field, expected to be used for reflection.
	ServiceDescriptor() ([]byte, int)

	// ProtocGenTwirpVersion is the semantic version string of the version of
	// twirp used to generate this file.
	ProtocGenTwirpVersion() string

	// PathPrefix returns the HTTP URL path prefix for all methods handled by this
	// service. This can be used with an HTTP mux to route Twirp requests.
	// The path prefix is in the form: "/<prefix>/<package>.<Service>/"
	// that is, everything in a Twirp route except for the <Method> at the end.
	PathPrefix() string
}

func newServerOpts(opts []interface{}) *twirp.ServerOptions {
	serverOpts := &twirp.ServerOptions{}
	for _, opt := range opts {
		switch o := opt.(type) {
		case twirp.ServerOption:
			o(serverOpts)
		case *twirp.ServerHooks: // backwards compatibility, allow to specify hooks as an argument
			twirp.WithServerHooks(o)(serverOpts)
		case nil: // backwards compatibility, allow nil value for the argument
			continue
		default:
			panic(fmt.Sprintf("Invalid option type %T, please use a twirp.ServerOption", o))
		}
	}
	return serverOpts
}

// WriteError writes an HTTP response with a valid Twirp error format (code, msg, meta).
// Useful outside of the Twirp server (e.g. http middleware), but does not trigger hooks.
// If err is not a twirp.Error, it will get wrapped with twirp.InternalErrorWith(err)
func WriteError(resp http.ResponseWriter, err error) {
	writeError(context.Background(), resp, err, nil)
}

// writeError writes Twirp errors in the response and triggers hooks.
func writeError(ctx context.Context, resp http.ResponseWriter, err error, hooks *twirp.ServerHooks) {
	// Convert to a twirp.Error. Non-twirp errors are converted to internal errors.
	var twerr twirp.Error
	if !errors.As(err, &twerr) {
		twerr = twirp.InternalErrorWith(err)
	}

	statusCode := twirp.ServerHTTPStatusFromErrorCode(twerr.Code())
	ctx = ctxsetters.WithStatusCode(ctx, statusCode)
	ctx = callError(ctx, hooks, twerr)

	respBody := marshalErrorToJSON(twerr)

	resp.Header().Set("Content-Type", "application/json") // Error responses are always JSON
	resp.Header().Set("Content-Length", strconv.Itoa(len(respBody)))
	resp.WriteHeader(statusCode) // set HTTP status code and send response

	_, writeErr := resp.Write(respBody)
	if writeErr != nil {
		// We have three options here. We could log the error, call the Error
		// hook, or just silently ignore the error.
		//
		// Logging is unacceptable because we don't have a user-controlled
		// logger; writing out to stderr without permission is too rude.
		//
		// Calling the Error hook would confuse users: it would mean the Error
		// hook got called twice for one request, which is likely to lead to
		// duplicated log messages and metrics, no matter how well we document
		// the behavior.
		//
		// Silently ignoring the error is our least-bad option. It's highly
		// likely that the connection is broken and the original 'err' says
		// so anyway.
		_ = writeErr
	}

	callResponseSent(ctx, hooks)
}

// sanitizeBaseURL parses the the baseURL, and adds the "http" scheme if needed.
// If the URL is unparsable, the baseURL is returned unchaged.
func sanitizeBaseURL(baseURL string) string {
	u, err := url.Parse(baseURL)
	if err != nil {
		return baseURL // invalid URL will fail later when making requests
	}
	if u.Scheme == "" {
		u.Scheme = "http"
	}
	return u.String()
}

// baseServicePath composes the path prefix for the service (without <Method>).
// e.g.: baseServicePath("/twirp", "my.pkg", "MyService")
//       returns => "/twirp/my.pkg.MyService/"
// e.g.: baseServicePath("", "", "MyService")
//       returns => "/MyService/"
func baseServicePath(prefix, pkg, service string) string {
	fullServiceName := service
	if pkg != "" {
		fullServiceName = pkg + "." + service
	}
	return path.Join("/", prefix, fullServiceName) + "/"
}

// parseTwirpPath extracts path components form a valid Twirp route.
// Expected format: "[<prefix>]/<package>.<Service>/<Method>"
// e.g.: prefix, pkgService, method := parseTwirpPath("/twirp/pkg.Svc/MakeHat")
func parseTwirpPath(path string) (string, string, string) {
	parts := strings.Split(path, "/")
	if len(parts) < 2 {
		return "", "", ""
	}
	method := parts[len(parts)-1]
	pkgService := parts[len(parts)-2]
	prefix := strings.Join(parts[0:len(parts)-2], "/")
	return prefix, pkgService, method
}

// getCustomHTTPReqHeaders retrieves a copy of any headers that are set in
// a context through the twirp.WithHTTPRequestHeaders function.
// If there are no headers set, or if they have the wrong type, nil is returned.
func getCustomHTTPReqHeaders(ctx context.Context) http.Header {
	header, ok := twirp.HTTPRequestHeaders(ctx)
	if !ok || header == nil {
		return nil
	}
	copied := make(http.Header)
	for k, vv := range header {
		if vv == nil {
			copied[k] = nil
			continue
		}
		copied[k] = make([]string, len(vv))
		copy(copied[k], vv)
	}
	return copied
}

// newRequest makes an http.Request from a client, adding common headers.
func newRequest(ctx context.Context, url string, reqBody io.Reader, contentType string) (*http.Request, error) {
	req, err := http.NewRequest("POST", url, reqBody)
	if err != nil {
		return nil, err
	}
	req = req.WithContext(ctx)
	if customHeader := getCustomHTTPReqHeaders(ctx); customHeader != nil {
		req.Header = customHeader
	}
	req.Header.Set("Accept", contentType)
	req.Header.Set("Content-Type", contentType)
	req.Header.Set("Twirp-Version", "v8.1.1")
	return req, nil
}

// JSON serialization for errors
type twerrJSON struct {
	Code string            `json:"code"`
	Msg  string            `json:"msg"`
	Meta map[string]string `json:"meta,omitempty"`
}

// marshalErrorToJSON returns JSON from a twirp.Error, that can be used as HTTP error response body.
// If serialization fails, it will use a descriptive Internal error instead.
func marshalErrorToJSON(twerr twirp.Error) []byte {
	// make sure that msg is not too large
	msg := twerr.Msg()
	if len(msg) > 1e6 {
		msg = msg[:1e6]
	}

	tj := twerrJSON{
		Code: string(twerr.Code()),
		Msg:  msg,
		Meta: twerr.MetaMap(),
	}

	buf, err := json.Marshal(&tj)
	if err != nil {
		buf = []byte("{\"type\": \"" + twirp.Internal + "\", \"msg\": \"There was an error but it could not be serialized into JSON\"}") // fallback
	}

	return buf
}

// errorFromResponse builds a twirp.Error from a non-200 HTTP response.
// If the response has a valid serialized Twirp error, then it's returned.
// If not, the response status code is used to generate a similar twirp
// error. See twirpErrorFromIntermediary for more info on intermediary errors.
func errorFromResponse(resp *http.Response) twirp.Error {
	statusCode := resp.StatusCode
	statusText := http.StatusText(statusCode)

	if isHTTPRedirect(statusCode) {
		// Unexpected redirect: it must be an error from an intermediary.
		// Twirp clients don't follow redirects automatically, Twirp only handles
		// POST requests, redirects should only happen on GET and HEAD requests.
		location := resp.Header.Get("Location")
		msg := fmt.Sprintf("unexpected HTTP status code %d %q received, Location=%q", statusCode, statusText, location)
		return twirpErrorFromIntermediary(statusCode, msg, location)
	}

	respBodyBytes, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		return wrapInternal(err, "failed to read server error response body")
	}

	var tj twerrJSON
	dec := json.NewDecoder(bytes.NewReader(respBodyBytes))
	dec.DisallowUnknownFields()
	if err := dec.Decode(&tj); err != nil || tj.Code == "" {
		// Invalid JSON response; it must be an error from an intermediary.
		msg := fmt.Sprintf("Error from intermediary with HTTP status code %d %q", statusCode, statusText)
		return twirpErrorFromIntermediary(statusCode, msg, string(respBodyBytes))
	}

	errorCode := twirp.ErrorCode(tj.Code)
	if !twirp.IsValidErrorCode(errorCode) {
		msg := "invalid type returned from server error response: " + tj.Code
		return twirp.InternalError(msg).WithMeta("body", string(respBodyBytes))
	}

	twerr := twirp.NewError(errorCode, tj.Msg)
	for k, v := range tj.Meta {
		twerr = twerr.WithMeta(k, v)
	}
	return twerr
}

// twirpErrorFromIntermediary maps HTTP errors from non-twirp sources to twirp errors.
// The mapping is similar to gRPC: https://github.com/grpc/grpc/blob/master/doc/http-grpc-status-mapping.md.
// Returned twirp Errors have some additional metadata for inspection.
func twirpErrorFromIntermediary(status int, msg string, bodyOrLocation string) twirp.Error {
	var code twirp.ErrorCode
	if isHTTPRedirect(status) { // 3xx
		code = twirp.Internal
	} else {
		switch status {
		case 400: // Bad Request
			code = twirp.Internal
		case 401: // Unauthorized
			code = twirp.Unauthenticated
		case 403: // Forbidden
			code = twirp.PermissionDenied
		case 404: // Not Found
			code = twirp.BadRoute
		case 429: // Too Many Requests
			code = twirp.ResourceExhausted
		case 502, 503, 504: // Bad Gateway, Service Unavailable, Gateway Timeout
			code = twirp.Unavailable
		default: // All other codes
			code = twirp.Unknown
		}
	}

	twerr := twirp.NewError(code, msg)
	twerr = twerr.WithMeta("http_error_from_intermediary", "true") // to easily know if this error was from intermediary
	twerr = twerr.WithMeta("status_code", strconv.Itoa(status))
	if isHTTPRedirect(status) {
		twerr = twerr.WithMeta("location", bodyOrLocation)
	} else {
		twerr = twerr.WithMeta("body", bodyOrLocation)
	}
	return twerr
}

func isHTTPRedirect(status int) bool {
	return status >= 300 && status <= 399
}

// wrapInternal wraps an error with a prefix as an Internal error.
// The original error cause is accessible by github.com/pkg/errors.Cause.
func wrapInternal(err error, prefix string) twirp.Error {
	return twirp.InternalErrorWith(&wrappedError{prefix: prefix, cause: err})
}

type wrappedError struct {
	prefix string
	cause  error
}

func (e *wrappedError) Error() string { return e.prefix + ": " + e.cause.Error() }
func (e *wrappedError) Unwrap() error { return e.cause } // for go1.13 + errors.Is/As
func (e *wrappedError) Cause() error  { return e.cause } // for github.com/pkg/errors

// ensurePanicResponses makes sure that rpc methods causing a panic still result in a Twirp Internal
// error response (status 500), and error hooks are properly called with the panic wrapped as an error.
// The panic is re-raised so it can be handled normally with middleware.
func ensurePanicResponses(ctx context.Context, resp http.ResponseWriter, hooks *twirp.ServerHooks) {
	if r := recover(); r != nil {
		// Wrap the panic as an error so it can be passed to error hooks.
		// The original error is accessible from error hooks, but not visible in the response.
		err := errFromPanic(r)
		twerr := &internalWithCause{msg: "Internal service panic", cause: err}
		// Actually write the error
		writeError(ctx, resp, twerr, hooks)
		// If possible, flush the error to the wire.
		f, ok := resp.(http.Flusher)
		if ok {
			f.Flush()
		}

		panic(r)
	}
}

// errFromPanic returns the typed error if the recovered panic is an error, otherwise formats as error.
func errFromPanic(p interface{}) error {
	if err, ok := p.(error); ok {
		return err
	}
	return fmt.Errorf("panic: %v", p)
}

// internalWithCause is a Twirp Internal error wrapping an original error cause,
// but the original error message is not exposed on Msg(). The original error
// can be checked with go1.13+ errors.Is/As, and also by (github.com/pkg/errors).Unwrap
type internalWithCause struct {
	msg   string
	cause error
}

func (e *internalWithCause) Unwrap() error                               { return e.cause } // for go1.13 + errors.Is/As
func (e *internalWithCause) Cause() error                                { return e.cause } // for github.com/pkg/errors
func (e *internalWithCause) Error() string                               { return e.msg + ": " + e.cause.Error() }
func (e *internalWithCause) Code() twirp.ErrorCode                       { return twirp.Internal }
func (e *internalWithCause) Msg() string                                 { return e.msg }
func (e *internalWithCause) Meta(key string) string                      { return "" }
func (e *internalWithCause) MetaMap() map[string]string                  { return nil }
func (e *internalWithCause) WithMeta(key string, val string) twirp.Error { return e }

// malformedRequestError is used when the twirp server cannot unmarshal a request
func malformedRequestError(msg string) twirp.Error {
	return twirp.NewError(twirp.Malformed, msg)
}

// badRouteError is used when the twirp server cannot route a request
func badRouteError(msg string, method, url string) twirp.Error {
	err := twirp.NewError(twirp.BadRoute, msg)
	err = err.WithMeta("twirp_invalid_route", method+" "+url)
	return err
}

// withoutRedirects makes sure that the POST request can not be redirected.
// The standard library will, by default, redirect requests (including POSTs) if it gets a 302 or
// 303 response, and also 301s in go1.8. It redirects by making a second request, changing the
// method to GET and removing the body. This produces very confusing error messages, so instead we
// set a redirect policy that always errors. This stops Go from executing the redirect.
//
// We have to be a little careful in case the user-provided http.Client has its own CheckRedirect
// policy - if so, we'll run through that policy first.
//
// Because this requires modifying the http.Client, we make a new copy of the client and return it.
func withoutRedirects(in *http.Client) *http.Client {
	copy := *in
	copy.CheckRedirect = func(req *http.Request, via []*http.Request) error {
		if in.CheckRedirect != nil {
			// Run the input's redirect if it exists, in case it has side effects, but ignore any error it
			// returns, since we want to use ErrUseLastResponse.
			err := in.CheckRedirect(req, via)
			_ = err // Silly, but this makes sure generated code passes errcheck -blank, which some people use.
		}
		return http.ErrUseLastResponse
	}
	return &copy
}

// doProtobufRequest makes a Protobuf request to the remote Twirp service.
func doProtobufRequest(ctx context.Context, client HTTPClient, hooks *twirp.ClientHooks, url string, in, out proto.Message) (_ context.Context, err error) {
	reqBodyBytes, err := proto.Marshal(in)
	if err != nil {
		return ctx, wrapInternal(err, "failed to marshal proto request")
	}
	reqBody := bytes.NewBuffer(reqBodyBytes)
	if err = ctx.Err(); err != nil {
		return ctx, wrapInternal(err, "aborted because context was done")
	}

	req, err := newRequest(ctx, url, reqBody, "application/protobuf")
	if err != nil {
		return ctx, wrapInternal(err, "could not build request")
	}
	ctx, err = callClientRequestPrepared(ctx, hooks, req)
	if err != nil {
		return ctx, err
	}

	req = req.WithContext(ctx)
	resp, err := client.Do(req)
	if err != nil {
		return ctx, wrapInternal(err, "failed to do request")
	}
	defer func() { _ = resp.Body.Close() }()

	if err = ctx.Err(); err != nil {
		return ctx, wrapInternal(err, "aborted because context was done")
	}

	if resp.StatusCode != 200 {
		return ctx, errorFromResponse(resp)
	}

	respBodyBytes, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		return ctx, wrapInternal(err, "failed to read response body")
	}
	if err = ctx.Err(); err != nil {
		return ctx, wrapInternal(err, "aborted because context was done")
	}

	if err = proto.Unmarshal(respBodyBytes, out); err != nil {
		return ctx, wrapInternal(err, "failed to unmarshal proto response")
	}
	return ctx, nil
}

// doJSONRequest makes a JSON request to the remote Twirp service.
func doJSONRequest(ctx context.Context, client HTTPClient, hooks *twirp.ClientHooks, url string, in, out proto.Message) (_ context.Context, err error) {
	marshaler := &protojson.MarshalOptions{UseProtoNames: true}
	reqBytes, err := marshaler.Marshal(in)
	if err != nil {
		return ctx, wrapInternal(err, "failed to marshal json request")
	}
	if err = ctx.Err(); err != nil {
		return ctx, wrapInternal(err, "aborted because context was done")
	}

	req, err := newRequest(ctx, url, bytes.NewReader(reqBytes), "application/json")
	if err != nil {
		return ctx, wrapInternal(err, "could not build request")
	}
	ctx, err = callClientRequestPrepared(ctx, hooks, req)
	if err != nil {
		return ctx, err
	}

	req = req.WithContext(ctx)
	resp, err := client.Do(req)
	if err != nil {
		return ctx, wrapInternal(err, "failed to do request")
	}

	defer func() {
		cerr := resp.Body.Close()
		if err == nil && cerr != nil {
			err = wrapInternal(cerr, "failed to close response body")
		}
	}()

	if err = ctx.Err(); err != nil {
		return ctx, wrapInternal(err, "aborted because context was done")
	}

	if resp.StatusCode != 200 {
		return ctx, errorFromResponse(resp)
	}

	d := json.NewDecoder(resp.Body)
	rawRespBody := json.RawMessage{}
	if err := d.Decode(&rawRespBody); err != nil {
		return ctx, wrapInternal(err, "failed to unmarshal json response")
	}
	unmarshaler := protojson.UnmarshalOptions{DiscardUnknown: true}
	if err = unmarshaler.Unmarshal(rawRespBody, out); err != nil {
		return ctx, wrapInternal(err, "failed to unmarshal json response")
	}
	if err = ctx.Err(); err != nil {
		return ctx, wrapInternal(err, "aborted because context was done")
	}
	return ctx, nil
}

// Call twirp.ServerHooks.RequestReceived if the hook is available
func callRequestReceived(ctx context.Context, h *twirp.ServerHooks) (context.Context, error) {
	if h == nil || h.RequestReceived == nil {
		return ctx, nil
	}
	return h.RequestReceived(ctx)
}

// Call twirp.ServerHooks.RequestRouted if the hook is available
func callRequestRouted(ctx context.Context, h *twirp.ServerHooks) (context.Context, error) {
	if h == nil || h.RequestRouted == nil {
		return ctx, nil
	}
	return h.RequestRouted(ctx)
}

// Call twirp.ServerHooks.ResponsePrepared if the hook is available
func callResponsePrepared(ctx context.Context, h *twirp.ServerHooks) context.Context {
	if h == nil || h.ResponsePrepared == nil {
		return ctx
	}
	return h.ResponsePrepared(ctx)
}

// Call twirp.ServerHooks.ResponseSent if the hook is available
func callResponseSent(ctx context.Context, h *twirp.ServerHooks) {
	if h == nil || h.ResponseSent == nil {
		return
	}
	h.ResponseSent(ctx)
}

// Call twirp.ServerHooks.Error if the hook is available
func callError(ctx context.Context, h *twirp.ServerHooks, err twirp.Error) context.Context {
	if h == nil || h.Error == nil {
		return ctx
	}
	return h.Error(ctx, err)
}

func callClientResponseReceived(ctx context.Context, h *twirp.ClientHooks) {
	if h == nil || h.ResponseReceived == nil {
		return
	}
	h.ResponseReceived(ctx)
}

func callClientRequestPrepared(ctx context.Context, h *twirp.ClientHooks, req *http.Request) (context.Context, error) {
	if h == nil || h.RequestPrepared == nil {
		return ctx, nil
	}
	return h.RequestPrepared(ctx, req)
}

func callClientError(ctx context.Context, h *twirp.ClientHooks, err twirp.Error) {
	if h == nil || h.Error == nil {
		return
	}
	h.Error(ctx, err)
}

var twirpFileDescriptor0 = []byte{
	// 1582 bytes of a gzipped FileDescriptorProto
	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xa4, 0x58, 0x49, 0x6f, 0xdb, 0x46,
	0x14, 0x0e, 0xb5, 0xd8, 0xd2, 0xb3, 0x24, 0xd3, 0x63, 0xc7, 0x21, 0x14, 0xc7, 0x70, 0xd9, 0x20,
	0x30, 0x5c, 0xc0, 0x41, 0x65, 0x14, 0x09, 0x02, 0x74, 0xd1, 0x42, 0xd9, 0x44, 0xa8, 0x05, 0x43,
	0x49, 0xa9, 0xdb, 0x43, 0xc0, 0x48, 0x13, 0x99, 0xb0, 0x4c, 0x32, 0x24, 0x65, 0x54, 0xd7, 0x5e,
	0x7a, 0xea, 0x2f, 0xe8, 0xff, 0x28, 0xd0, 0x5f, 0xd1, 0x4b, 0xcf, 0x3d, 0xf4, 0x97, 0x14, 0x33,
	0x43, 0x52, 0xa4, 0xc4, 0xda, 0x69, 0x7b, 0xe3, 0xf7, 0xbd, 0x65, 0xde, 0x2c, 0xef, 0xcd, 0x1b,
	0xc2, 0xee, 0xbb, 0xb9, 0x39, 0x9b, 0x78, 0x64, 0x3c, 0x77, 0x4d, 0x7f, 0x71, 0xea, 0xb8, 0xb6,
	0x6f, 0xa3, 0x72, 0x82, 0x94, 0x3f, 0x83, 0x5d, 0xcd, 0xb6, 0xaf, 0xe7, 0x0e, 0x26, 0x8e, 0xed,
	0x99, 0xbe, 0xed, 0x2e, 0x30, 0xf9, 0x80, 0xf6, 0x20, 0xaf, 0x37, 0x3b, 0x6a, 0x4b, 0x12, 0x8e,
	0x84, 0xe3, 0x22, 0xe6, 0x40, 0x7e, 0x05, 0x7b, 0xeb, 0xca, 0x9e, 0x83, 0x64, 0x28, 0x2d, 0x19,
	0xb5, 0x25, 0x65, 0x98, 0x51, 0x82, 0x93, 0xbf, 0x86, 0xdd, 0xa6, 0x4b, 0x0c, 0x9f, 0x7c, 0xc4,
	0x40, 0x08, 0x41, 0xae, 0x6b, 0xdc, 0x90, 0xc0, 0x11, 0xfb, 0xa6, 0x83, 0xaf, 0x3b, 0x48, 0x19,
	0x5c, 0x48, 0x19, 0x5c, 0x83, 0xca, 0x39, 0xf1, 0xfb, 0xf6, 0xcc, 0x1c, 0x9b, 0xc4, 0xa3, 0xe3,
	0x7e, 0x84, 0x15, 0xda, 0x87, 0x8d, 0x86, 0x6b, 0x58, 0xe3, 0xab, 0x20, 0x8e, 0x00, 0xc9, 0x2d,
	0xd8, 0x4e, 0x78, 0xf3, 0x1c, 0xf4, 0x39, 0x14, 0x42, 0x2c, 0x09, 0x47, 0xd9, 0xe3, 0xad, 0xda,
	0xc3, 0xd3, 0xe4, 0xea, 0x33, 0xf1, 0x02, 0x47, 0x6a, 0xf2, 0x1f, 0x79, 0x28, 0xf3, 0x09, 0xe9,
	0x63, 0xc3, 0xfa, 0x9f, 0x31, 0xd1, 0x15, 0x1b, 0x7a, 0xc4, 0x95, 0xb2, 0x7c, 0xc5, 0xe8, 0x37,
	0xd5, 0xd5, 0x17, 0x9e, 0x4f, 0x6e, 0xa4, 0x1c, 0xd7, 0xe5, 0x88, 0xf2, 0x4d, 0xfb, 0xe6, 0xc6,
	0xf4, 0xa5, 0x3c, 0xe7, 0x39, 0x42, 0xcf, 0x61, 0x13, 0x13, 0x6f, 0x3e, 0xf3, 0x3d, 0x69, 0x33,
	0x75, 0x0e, 0x5c, 0x8a, 0x43, 0x2d, 0xf4, 0x0a, 0x72, 0x03, 0x63, 0xea, 0x49, 0x05, 0xa6, 0xfd,
	0x6c, 0x45, 0x3b, 0x31, 0xb9, 0x53, 0xaa, 0xa8, 0x58, 0xbe, 0xbb, 0xc0, 0xcc, 0x06, 0x7d, 0x03,
	0x5b, 0x03, 0xd7, 0x9c, 0x4e, 0x89, 0x4b, 0x26, 0x8d, 0x85, 0x54, 0x3c, 0x12, 0x8e, 0x2b, 0xb5,
	0xc3, 0x15, 0x17, 0x31, 0x0d, 0xc5, 0x9a, 0xdf, 0xe0, 0xb8, 0x09, 0x12, 0x21, 0x8b, 0xe7, 0x96,
	0x04, 0x6c, 0x0e, 0xf4, 0x13, 0x49, 0xb0, 0xd9, 0xa0, 0xf6, 0x6a, 0x4b, 0xda, 0x62, 0x6c, 0x08,
	0xd1, 0x17, 0x50, 0xec, 0x9b, 0x0e, 0x99, 0x99, 0x16, 0xf1, 0xa4, 0x12, 0x0b, 0xf7, 0xd1, 0xea,
	0x06, 0x05, 0x72, 0xbc, 0xd4, 0x44, 0x3f, 0x0a, 0x70, 0x30, 0x30, 0xdc, 0x29, 0xf1, 0xfb, 0xc6,
	0xf8, 0xda, 0x98, 0x92, 0x16, 0x71, 0x88, 0x35, 0x21, 0x16, 0xdd, 0xc1, 0x8e, 0xe1, 0x48, 0x65,
	0xe6, 0xea, 0xab, 0x7b, 0x66, 0xfe, 0xcf, 0x0e, 0xf8, 0x8a, 0xdc, 0x39, 0x46, 0xf5, 0x05, 0x14,
	0xa3, 0xc5, 0xa3, 0x93, 0xbe, 0x26, 0x8b, 0xe0, 0x68, 0xd0, 0x4f, 0x9a, 0x41, 0xb7, 0xc6, 0x6c,
	0x1e, 0x26, 0x0b, 0x07, 0xaf, 0x32, 0x2f, 0x85, 0xaa, 0x07, 0x9f, 0xdc, 0x3b, 0x76, 0x8a, 0xc3,
	0x97, 0x71, 0x87, 0x5b, 0x35, 0x79, 0x75, 0x9d, 0xd6, 0x9d, 0xc5, 0x06, 0x95, 0x8f, 0xa1, 0x12,
	0x9f, 0xbe, 0xe7, 0xb0, 0x63, 0x38, 0x36, 0xac, 0xe8, 0x40, 0x07, 0x48, 0xfe, 0x4d, 0x80, 0x0d,
	0x9e, 0x15, 0xa8, 0x1a, 0xa4, 0xcf, 0xf2, 0xd4, 0x47, 0x98, 0xca, 0x14, 0xeb, 0xbd, 0xed, 0x8e,
	0xc9, 0x84, 0x45, 0x54, 0xc0, 0x11, 0x46, 0x2f, 0xa1, 0xd0, 0xb4, 0x2d, 0xdf, 0xb5, 0x67, 0x9e,
	0x94, 0x65, 0x5b, 0x71, 0x90, 0x9a, 0x76, 0x81, 0x12, 0x8e, 0xb4, 0xd1, 0x97, 0x00, 0x5c, 0x34,
	0x58, 0x38, 0x84, 0xe5, 0x47, 0xa5, 0xf6, 0x24, 0xd5, 0x96, 0x2a, 0xb0, 0xc3, 0x17, 0x33, 0x90,
	0x7f, 0x17, 0xa0, 0x9c, 0x70, 0xcd, 0xa6, 0xe0, 0xda, 0xb7, 0xe6, 0x84, 0xb8, 0xd1, 0x14, 0x02,
	0x4c, 0xcf, 0xa5, 0x4e, 0xdc, 0x5b, 0x73, 0x1c, 0x6e, 0x52, 0x08, 0xe9, 0xda, 0xd4, 0x47, 0x2d,
	0xb5, 0xc5, 0xc3, 0x2f, 0xe2, 0x00, 0xa1, 0x17, 0x50, 0xd0, 0xc9, 0x2d, 0xa1, 0x61, 0x04, 0xc1,
	0x3d, 0x5e, 0x09, 0x2e, 0x14, 0xb3, 0xd0, 0x22, 0x65, 0x66, 0x38, 0x36, 0x2c, 0x36, 0xab, 0x7c,
	0xba, 0x61, 0x20, 0x0e, 0x0c, 0x03, 0x24, 0xdf, 0x42, 0x29, 0x28, 0x51, 0x2c, 0xb9, 0xff, 0xf3,
	0x96, 0xec, 0xc3, 0x46, 0xdb, 0x30, 0x67, 0x64, 0xc2, 0x4a, 0x51, 0x01, 0x07, 0x88, 0xf2, 0x98,
	0x18, 0x9e, 0x6d, 0x85, 0xc5, 0x88, 0x23, 0xf9, 0xe7, 0x4d, 0x2a, 0x60, 0x43, 0xee, 0x41, 0x9e,
	0x4d, 0x3f, 0xbc, 0x0b, 0x18, 0xa0, 0x8b, 0xd7, 0x21, 0x9e, 0x67, 0x4c, 0xa3, 0xc5, 0x0b, 0x20,
	0xaa, 0x41, 0x2e, 0xb6, 0x7b, 0x87, 0xa9, 0xc5, 0xea, 0x34, 0x9a, 0x2a, 0xd3, 0x4d, 0x2c, 0x6c,
	0xfe, 0xdf, 0x2c, 0xec, 0x1e, 0xe4, 0x07, 0xa6, 0x3f, 0x23, 0xd2, 0x06, 0x0f, 0x8e, 0x01, 0xba,
	0x12, 0x6d, 0x73, 0x46, 0x2c, 0x7a, 0x59, 0x6d, 0xf2, 0x55, 0x0a, 0x31, 0x3a, 0x80, 0xa2, 0xee,
	0x1b, 0xae, 0xaf, 0x99, 0x16, 0x91, 0x0a, 0x47, 0xc2, 0x71, 0x1e, 0x2f, 0x09, 0x3a, 0x2d, 0xc5,
	0x9a, 0x30, 0x59, 0x91, 0xc9, 0x42, 0x48, 0x7d, 0x62, 0xe2, 0xd9, 0x73, 0x77, 0x4c, 0x82, 0xe2,
	0x16, 0x61, 0x54, 0x0f, 0x8f, 0x5d, 0x58, 0xa8, 0xb7, 0xd8, 0xa9, 0x7f, 0x9c, 0x7e, 0xd9, 0xf0,
	0x72, 0x9d, 0xb4, 0xa0, 0x03, 0xf7, 0xaf, 0xa7, 0xec, 0x7a, 0x2d, 0xf1, 0xf5, 0x0c, 0x20, 0x3a,
	0x01, 0x51, 0xb5, 0x3c, 0xdf, 0x98, 0xcd, 0xc8, 0x64, 0x44, 0x5c, 0xcf, 0xb4, 0x2d, 0xa9, 0xcc,
	0x54, 0xd6, 0x78, 0x7a, 0x57, 0xb5, 0xcd, 0x1f, 0x96, 0x7a, 0x15, 0x7e, 0x57, 0xc5, 0x39, 0x74,
	0x08, 0xd0, 0x32, 0x7c, 0x43, 0xe7, 0x53, 0xd9, 0x66, 0x1a, 0x31, 0x06, 0x35, 0xa0, 0x3c, 0x22,
	0xd6, 0xc4, 0x76, 0xf5, 0xb1, 0xed, 0x9a, 0xd6, 0x54, 0x12, 0x53, 0x53, 0x38, 0xa1, 0x83, 0x93,
	0x26, 0xe8, 0x29, 0x94, 0xbd, 0xb9, 0xe3, 0xb8, 0xc4, 0xa3, 0x43, 0xaa, 0x2d, 0x69, 0x87, 0x0d,
	0x93, 0x24, 0xa9, 0x56, 0x7f, 0xfe, 0x6e, 0x66, 0x7a, 0x57, 0x64, 0xd2, 0x32, 0x7c, 0x22, 0xa1,
	0x23, 0xe1, 0x38, 0x8b, 0x93, 0x24, 0x9d, 0x93, 0x66, 0x78, 0x7e, 0xc7, 0x9e, 0x98, 0xef, 0x4d,
	0x32, 0x91, 0x76, 0x99, 0x52, 0x82, 0x93, 0xff, 0x14, 0xa0, 0x10, 0x1e, 0x29, 0x24, 0x42, 0x69,
	0x70, 0xd9, 0x57, 0xde, 0x0e, 0xbb, 0xaf, 0xbb, 0xbd, 0x37, 0x5d, 0xf1, 0x01, 0x42, 0x50, 0x61,
	0xcc, 0x40, 0xc1, 0xb8, 0xde, 0xee, 0xe1, 0x8e, 0x28, 0xa0, 0x47, 0xb0, 0xcb, 0xb8, 0xa6, 0xd6,
	0x1b, 0xb6, 0x28, 0x57, 0x1f, 0xa8, 0xbd, 0xae, 0x98, 0x41, 0xbb, 0xb0, 0xcd, 0x04, 0xad, 0x5e,
	0xf3, 0xb5, 0x82, 0xdb, 0xaa, 0xa6, 0x88, 0xd9, 0x88, 0x7c, 0x3d, 0x6c, 0x28, 0xb8, 0xab, 0x0c,
	0x14, 0x5d, 0xcc, 0xa1, 0x32, 0x14, 0x19, 0x79, 0x59, 0xef, 0x68, 0x62, 0x1e, 0x95, 0xa0, 0xc0,
	0xe0, 0x45, 0x53, 0x13, 0x37, 0x90, 0x04, 0x7b, 0x0c, 0x8d, 0x86, 0x5a, 0x57, 0xc1, 0xf5, 0x86,
	0xaa, 0xa9, 0x03, 0x55, 0xd1, 0xc5, 0xcd, 0x28, 0x3e, 0x5d, 0x69, 0x62, 0x65, 0xa0, 0x8b, 0x85,
	0xc8, 0xd1, 0x85, 0xa2, 0x75, 0xc4, 0x22, 0xda, 0x81, 0x32, 0x83, 0x7d, 0xb5, 0xaf, 0x68, 0x6a,
	0x57, 0x11, 0x41, 0xfe, 0x45, 0x58, 0xd9, 0x15, 0xba, 0x8d, 0xb7, 0x8c, 0x60, 0x67, 0x86, 0xe7,
	0x66, 0x8c, 0xa1, 0x07, 0x6a, 0x54, 0xa3, 0xca, 0x3c, 0x41, 0x33, 0x38, 0x84, 0xf4, 0x24, 0x8f,
	0x6a, 0x23, 0x32, 0xf6, 0xed, 0xb0, 0x31, 0x89, 0x30, 0xb3, 0x3a, 0xe3, 0x56, 0xb9, 0xc0, 0xea,
	0x6c, 0x69, 0x75, 0x16, 0x58, 0xe5, 0x03, 0xab, 0x00, 0xcb, 0xbf, 0x66, 0xa0, 0x10, 0x5e, 0xcf,
	0xa8, 0x02, 0x99, 0xa8, 0x58, 0x64, 0xd2, 0xbb, 0x46, 0x74, 0x04, 0x5b, 0xfc, 0x3a, 0xe2, 0xfb,
	0xce, 0x6b, 0x4f, 0x9c, 0xa2, 0x69, 0x1a, 0xc0, 0xc6, 0x22, 0x18, 0x6f, 0x49, 0x50, 0x9f, 0x7d,
	0xc3, 0xbf, 0x0a, 0xb2, 0x9e, 0x7d, 0xb3, 0xd2, 0x38, 0x33, 0xfc, 0xf7, 0xb6, 0x7b, 0x13, 0x26,
	0x7d, 0x88, 0x63, 0xfd, 0x59, 0x21, 0xd1, 0x9f, 0x3d, 0x85, 0x32, 0x3d, 0x47, 0xbc, 0xd3, 0xd2,
	0xaf, 0x0c, 0x96, 0xf4, 0x45, 0x9c, 0x24, 0xd1, 0x33, 0xa8, 0x2c, 0x09, 0x16, 0x30, 0x2f, 0x00,
	0x2b, 0x2c, 0x8d, 0x79, 0xe8, 0x4c, 0x82, 0x98, 0x79, 0xab, 0xb3, 0x24, 0x68, 0xcc, 0x9a, 0x69,
	0x5d, 0x07, 0xe9, 0xcd, 0xbe, 0x65, 0x13, 0x76, 0x53, 0x2e, 0x6e, 0x84, 0x53, 0xe9, 0xa0, 0x85,
	0x3d, 0xba, 0xe7, 0xe6, 0x5f, 0xe0, 0x34, 0x63, 0xf9, 0x1a, 0x76, 0xd6, 0x34, 0xd7, 0xf6, 0x6a,
	0x1f, 0x36, 0x78, 0x6f, 0x12, 0xf6, 0xb1, 0x1c, 0xd1, 0xd8, 0x59, 0x4d, 0x0f, 0xfa, 0x58, 0x56,
	0xb3, 0xab, 0x50, 0x68, 0x5e, 0xb1, 0x3e, 0xce, 0x93, 0x72, 0xec, 0x9a, 0x8c, 0xf0, 0xc9, 0x07,
	0xd8, 0x5e, 0x69, 0x12, 0x59, 0x3e, 0x60, 0xf5, 0xfc, 0x5c, 0xc1, 0x4a, 0xeb, 0x6d, 0xe3, 0x32,
	0x96, 0x9d, 0x0f, 0x61, 0x27, 0x21, 0xe9, 0x0f, 0xf5, 0x0b, 0x51, 0x60, 0x29, 0x97, 0xa0, 0xb1,
	0x98, 0x59, 0xf3, 0xd2, 0x6b, 0xb7, 0x59, 0x86, 0x64, 0x4f, 0x7e, 0x12, 0xa0, 0x14, 0xbf, 0x24,
	0xd0, 0x1e, 0x88, 0xba, 0x32, 0x52, 0xb0, 0x3a, 0x88, 0x0f, 0x26, 0x42, 0x29, 0x62, 0xb5, 0xde,
	0x1b, 0x3e, 0x4e, 0xc4, 0x74, 0x94, 0x96, 0x3a, 0xec, 0x88, 0x19, 0x9a, 0x82, 0x11, 0x79, 0xa1,
	0x9e, 0x5f, 0x88, 0x59, 0x1a, 0x66, 0x44, 0x35, 0xb1, 0x3a, 0x50, 0x9b, 0x75, 0x4d, 0xcc, 0x25,
	0x1c, 0x76, 0xea, 0xdf, 0x8a, 0xf9, 0x13, 0x05, 0x2a, 0xc9, 0x1e, 0x05, 0xed, 0x03, 0xea, 0xf7,
	0x34, 0xb5, 0x79, 0xf9, 0x96, 0xe7, 0x35, 0xfb, 0x16, 0x1f, 0xa0, 0xc7, 0xf0, 0x28, 0xce, 0xeb,
	0xc3, 0x7e, 0x1f, 0x2b, 0xba, 0x4e, 0xeb, 0x90, 0x70, 0xb2, 0x80, 0x52, 0xbc, 0x29, 0x40, 0x87,
	0x50, 0xd5, 0x9b, 0xf5, 0x2e, 0x57, 0xed, 0xa8, 0x7a, 0xb3, 0xd7, 0x6d, 0xab, 0xe7, 0x43, 0xcc,
	0xeb, 0x16, 0x73, 0xb6, 0x94, 0xc7, 0xab, 0xce, 0xa5, 0x28, 0xb0, 0xc5, 0x88, 0x84, 0xbc, 0xf0,
	0x88, 0x19, 0x1a, 0xd7, 0x92, 0x8d, 0xaa, 0x4d, 0xb6, 0xf6, 0x57, 0x06, 0xca, 0xac, 0x47, 0xd7,
	0x83, 0x43, 0x86, 0xbe, 0x07, 0x71, 0xf5, 0x8d, 0x89, 0x56, 0x5b, 0xd0, 0x94, 0x17, 0x6b, 0xf5,
	0xd3, 0x7b, 0x75, 0x3c, 0x87, 0x3a, 0x5f, 0x7d, 0x43, 0xae, 0x39, 0x4f, 0x79, 0xa5, 0xae, 0x39,
	0x4f, 0x7d, 0x88, 0x6a, 0xb0, 0x15, 0x7b, 0x16, 0xa2, 0xd5, 0x6e, 0x32, 0xf9, 0x00, 0xad, 0x1e,
	0xde, 0x25, 0xf6, 0x1c, 0xa4, 0x02, 0x2c, 0xfb, 0x68, 0x74, 0x70, 0xd7, 0x0b, 0xa3, 0xfa, 0xe4,
	0x0e, 0xa9, 0xe7, 0x34, 0xc4, 0xef, 0x2a, 0xcf, 0x13, 0x0a, 0xef, 0x36, 0xd8, 0xbf, 0x80, 0xb3,
	0xbf, 0x03, 0x00, 0x00, 0xff, 0xff, 0x8f, 0x43, 0xdb, 0x68, 0x22, 0x10, 0x00, 0x00,
}