web: reorder status buttons

web: fix proxy
web: do not overwrite existing cookie
2024-12-13 21:22:23 -08:00 · 2024-12-13 21:22:23 -08:00 · 2024-12-13 21:22:23 -08:00 · 2024-12-13 21:05:33 -08:00 · 2024-12-13 21:05:33 -08:00 · 2024-12-13 21:05:33 -08:00
116 changed files with 22518 additions and 4926 deletions
--- a/.gitignore
+++ b/.gitignore
@ -0,0 +1 @@
 .idea
--- a/36
+++ b/36
@ -0,0 +1,36 @@
 # Stage 1: Build
 FROM docker.io/golang:1.23 AS builder
 # Set the working directory in the container
 WORKDIR /app
 # Copy go.mod and go.sum files
 COPY go.mod go.sum ./
 # Download dependencies
 RUN --mount=type=secret,id=netrc,dst=/root/.netrc go mod download
 # Copy the entire project
 COPY . .
 # Build the Go application
 RUN CGO_ENABLED=0 GOOS=linux go build -o service ./cmd/maps-service/service.go
 # Stage 2: Run
 FROM alpine
 # Set up a non-root user for security
 RUN addgroup -S appgroup && adduser -S appuser -G appgroup
 USER appuser
 # Set the working directory in the container
 WORKDIR /home/appuser
 # Copy the built application from the builder stage
 COPY --from=builder /app/service .
 # Expose application port (adjust if needed)
 EXPOSE 8081
 # Command to run the application
 ENTRYPOINT ["./service"]
--- a/23
+++ b/23
@ -0,0 +1,23 @@
 Permission is hereby granted, free of charge, to any
 person obtaining a copy of this software and associated
 documentation files (the "Software"), to deal in the
 Software without restriction, including without
 limitation the rights to use, copy, modify, merge,
 publish, distribute, sublicense, and/or sell copies of
 the Software, and to permit persons to whom the Software
 is furnished to do so, subject to the following
 conditions:
 The above copyright notice and this permission notice
 shall be included in all copies or substantial portions
 of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
 ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
 TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
 PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
 SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
 IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.
--- a/8
+++ b/8
@ -0,0 +1,8 @@
 .PHONY: maps-service web validation
 maps-service:
 	DOCKER_BUILDKIT=1 docker build . -f Containerfile -t maps-service \
 		--secret id=netrc,src=/home/quat/.netrc
 web:
 	docker build web -f web/Containerfile -t maps-service-web
 validation:
 	docker build validation -f validation/Containerfile -t maps-service-validation
--- a/README.md
+++ b/README.md
@ -1,6 +1,15 @@
-# STRAFES.NET API
+# STRAFES.NET Map Submission System
-## How to Begin Development
+## Components
 - Submissions API (golang) `pkg/` `cmd/`
 - Website `/web/`
 - Script Validation (rust) `validation/`
 ## How to Begin Development on Each Component
 ### Submissions API
 Prerequisite: golang installed
 1. Run `go generate` to ensure the generated API is up-to-date. This project uses [ogen](https://github.com/ogen-go/ogen).
    ```bash
@ -12,3 +21,38 @@
    ```
    By default, the project opens at `localhost:8080`.
 ### Website
 Prerequisite: bun installed
 1. `cd web`
 2. `bun install`
 #### For development:
 3. `bun run dev`
 #### For production:
 3. `bun run build`
 4. `bun run start` (optionally start a node server)
 ### Script Validation
 Prerequisite: rust installed
 1. `cd validation`
 2. `cargo run --release`
 #### License
 <sup>
 Licensed under <a href="LICENSE">MIT license</a>.
 </sup>
 <br>
 <sub>
 Unless you explicitly state otherwise, any contribution intentionally submitted
 for inclusion in this project by you, shall be licensed as above, without any
 additional terms or conditions.
 </sub>
--- a/api/oas_client_gen.go
+++ b/api/oas_client_gen.go
@ -1,724 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 	"net/url"
 	"strings"
 	"time"
 	"github.com/go-faster/errors"
 	"go.opentelemetry.io/otel/attribute"
 	"go.opentelemetry.io/otel/codes"
 	"go.opentelemetry.io/otel/metric"
 	semconv "go.opentelemetry.io/otel/semconv/v1.26.0"
 	"go.opentelemetry.io/otel/trace"
 	"github.com/ogen-go/ogen/conv"
 	ht "github.com/ogen-go/ogen/http"
 	"github.com/ogen-go/ogen/otelogen"
 	"github.com/ogen-go/ogen/uri"
 )
 // Invoker invokes operations described by OpenAPI v3 specification.
 type Invoker interface {
 	// CreateSubmission invokes createSubmission operation.
 	//
 	// Create new submission.
 	//
 	// POST /submissions
 	CreateSubmission(ctx context.Context) (*Submission, error)
 	// GetSubmission invokes getSubmission operation.
 	//
 	// Retrieve map with ID.
 	//
 	// GET /submissions/{SubmissionID}
 	GetSubmission(ctx context.Context, params GetSubmissionParams) (*Submission, error)
 	// ListSubmissions invokes listSubmissions operation.
 	//
 	// Get list of submissions.
 	//
 	// GET /submissions
 	ListSubmissions(ctx context.Context, params ListSubmissionsParams) ([]Submission, error)
 	// PatchSubmissionCompleted invokes patchSubmissionCompleted operation.
 	//
 	// Retrieve map with ID.
 	//
 	// PATCH /submissions/{SubmissionID}/completed
 	PatchSubmissionCompleted(ctx context.Context, params PatchSubmissionCompletedParams) error
 	// PatchSubmissionModel invokes patchSubmissionModel operation.
 	//
 	// Update model following role restrictions.
 	//
 	// PATCH /submissions/{SubmissionID}/model
 	PatchSubmissionModel(ctx context.Context, params PatchSubmissionModelParams) error
 	// PatchSubmissionStatus invokes patchSubmissionStatus operation.
 	//
 	// Update status following role restrictions.
 	//
 	// PATCH /submissions/{SubmissionID}/status
 	PatchSubmissionStatus(ctx context.Context, params PatchSubmissionStatusParams) error
 }
 // Client implements OAS client.
 type Client struct {
 	serverURL *url.URL
 	baseClient
 }
 type errorHandler interface {
 	NewError(ctx context.Context, err error) *ErrorStatusCode
 }
 var _ Handler = struct {
 	errorHandler
 	*Client
 }{}
 func trimTrailingSlashes(u *url.URL) {
 	u.Path = strings.TrimRight(u.Path, "/")
 	u.RawPath = strings.TrimRight(u.RawPath, "/")
 }
 // NewClient initializes new Client defined by OAS.
 func NewClient(serverURL string, opts ...ClientOption) (*Client, error) {
 	u, err := url.Parse(serverURL)
 	if err != nil {
 		return nil, err
 	}
 	trimTrailingSlashes(u)
 	c, err := newClientConfig(opts...).baseClient()
 	if err != nil {
 		return nil, err
 	}
 	return &Client{
 		serverURL:  u,
 		baseClient: c,
 	}, nil
 }
 type serverURLKey struct{}
 // WithServerURL sets context key to override server URL.
 func WithServerURL(ctx context.Context, u *url.URL) context.Context {
 	return context.WithValue(ctx, serverURLKey{}, u)
 }
 func (c *Client) requestURL(ctx context.Context) *url.URL {
 	u, ok := ctx.Value(serverURLKey{}).(*url.URL)
 	if !ok {
 		return c.serverURL
 	}
 	return u
 }
 // CreateSubmission invokes createSubmission operation.
 //
 // Create new submission.
 //
 // POST /submissions
 func (c *Client) CreateSubmission(ctx context.Context) (*Submission, error) {
 	res, err := c.sendCreateSubmission(ctx)
 	return res, err
 }
 func (c *Client) sendCreateSubmission(ctx context.Context) (res *Submission, err error) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("createSubmission"),
 		semconv.HTTPRequestMethodKey.String("POST"),
 		semconv.HTTPRouteKey.String("/submissions"),
 	}
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		elapsedDuration := time.Since(startTime)
 		c.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), metric.WithAttributes(otelAttrs...))
 	}()
 	// Increment request counter.
 	c.requests.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 	// Start a span for this request.
 	ctx, span := c.cfg.Tracer.Start(ctx, "CreateSubmission",
 		trace.WithAttributes(otelAttrs...),
 		clientSpanKind,
 	)
 	// Track stage for error reporting.
 	var stage string
 	defer func() {
 		if err != nil {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			c.errors.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 		}
 		span.End()
 	}()
 	stage = "BuildURL"
 	u := uri.Clone(c.requestURL(ctx))
 	var pathParts [1]string
 	pathParts[0] = "/submissions"
 	uri.AddPathParts(u, pathParts[:]...)
 	stage = "EncodeRequest"
 	r, err := ht.NewRequest(ctx, "POST", u)
 	if err != nil {
 		return res, errors.Wrap(err, "create request")
 	}
 	stage = "SendRequest"
 	resp, err := c.cfg.Client.Do(r)
 	if err != nil {
 		return res, errors.Wrap(err, "do request")
 	}
 	defer resp.Body.Close()
 	stage = "DecodeResponse"
 	result, err := decodeCreateSubmissionResponse(resp)
 	if err != nil {
 		return res, errors.Wrap(err, "decode response")
 	}
 	return result, nil
 }
 // GetSubmission invokes getSubmission operation.
 //
 // Retrieve map with ID.
 //
 // GET /submissions/{SubmissionID}
 func (c *Client) GetSubmission(ctx context.Context, params GetSubmissionParams) (*Submission, error) {
 	res, err := c.sendGetSubmission(ctx, params)
 	return res, err
 }
 func (c *Client) sendGetSubmission(ctx context.Context, params GetSubmissionParams) (res *Submission, err error) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("getSubmission"),
 		semconv.HTTPRequestMethodKey.String("GET"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}"),
 	}
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		elapsedDuration := time.Since(startTime)
 		c.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), metric.WithAttributes(otelAttrs...))
 	}()
 	// Increment request counter.
 	c.requests.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 	// Start a span for this request.
 	ctx, span := c.cfg.Tracer.Start(ctx, "GetSubmission",
 		trace.WithAttributes(otelAttrs...),
 		clientSpanKind,
 	)
 	// Track stage for error reporting.
 	var stage string
 	defer func() {
 		if err != nil {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			c.errors.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 		}
 		span.End()
 	}()
 	stage = "BuildURL"
 	u := uri.Clone(c.requestURL(ctx))
 	var pathParts [2]string
 	pathParts[0] = "/submissions/"
 	{
 		// Encode "SubmissionID" parameter.
 		e := uri.NewPathEncoder(uri.PathEncoderConfig{
 			Param:   "SubmissionID",
 			Style:   uri.PathStyleSimple,
 			Explode: false,
 		})
 		if err := func() error {
 			return e.EncodeValue(conv.Int64ToString(params.SubmissionID))
 		}(); err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		encoded, err := e.Result()
 		if err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		pathParts[1] = encoded
 	}
 	uri.AddPathParts(u, pathParts[:]...)
 	stage = "EncodeRequest"
 	r, err := ht.NewRequest(ctx, "GET", u)
 	if err != nil {
 		return res, errors.Wrap(err, "create request")
 	}
 	stage = "SendRequest"
 	resp, err := c.cfg.Client.Do(r)
 	if err != nil {
 		return res, errors.Wrap(err, "do request")
 	}
 	defer resp.Body.Close()
 	stage = "DecodeResponse"
 	result, err := decodeGetSubmissionResponse(resp)
 	if err != nil {
 		return res, errors.Wrap(err, "decode response")
 	}
 	return result, nil
 }
 // ListSubmissions invokes listSubmissions operation.
 //
 // Get list of submissions.
 //
 // GET /submissions
 func (c *Client) ListSubmissions(ctx context.Context, params ListSubmissionsParams) ([]Submission, error) {
 	res, err := c.sendListSubmissions(ctx, params)
 	return res, err
 }
 func (c *Client) sendListSubmissions(ctx context.Context, params ListSubmissionsParams) (res []Submission, err error) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("listSubmissions"),
 		semconv.HTTPRequestMethodKey.String("GET"),
 		semconv.HTTPRouteKey.String("/submissions"),
 	}
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		elapsedDuration := time.Since(startTime)
 		c.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), metric.WithAttributes(otelAttrs...))
 	}()
 	// Increment request counter.
 	c.requests.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 	// Start a span for this request.
 	ctx, span := c.cfg.Tracer.Start(ctx, "ListSubmissions",
 		trace.WithAttributes(otelAttrs...),
 		clientSpanKind,
 	)
 	// Track stage for error reporting.
 	var stage string
 	defer func() {
 		if err != nil {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			c.errors.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 		}
 		span.End()
 	}()
 	stage = "BuildURL"
 	u := uri.Clone(c.requestURL(ctx))
 	var pathParts [1]string
 	pathParts[0] = "/submissions"
 	uri.AddPathParts(u, pathParts[:]...)
 	stage = "EncodeQueryParams"
 	q := uri.NewQueryEncoder()
 	{
 		// Encode "page" parameter.
 		cfg := uri.QueryParameterEncodingConfig{
 			Name:    "page",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.EncodeParam(cfg, func(e uri.Encoder) error {
 			return params.Page.EncodeURI(e)
 		}); err != nil {
 			return res, errors.Wrap(err, "encode query")
 		}
 	}
 	{
 		// Encode "filter" parameter.
 		cfg := uri.QueryParameterEncodingConfig{
 			Name:    "filter",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.EncodeParam(cfg, func(e uri.Encoder) error {
 			if val, ok := params.Filter.Get(); ok {
 				return val.EncodeURI(e)
 			}
 			return nil
 		}); err != nil {
 			return res, errors.Wrap(err, "encode query")
 		}
 	}
 	u.RawQuery = q.Values().Encode()
 	stage = "EncodeRequest"
 	r, err := ht.NewRequest(ctx, "GET", u)
 	if err != nil {
 		return res, errors.Wrap(err, "create request")
 	}
 	stage = "SendRequest"
 	resp, err := c.cfg.Client.Do(r)
 	if err != nil {
 		return res, errors.Wrap(err, "do request")
 	}
 	defer resp.Body.Close()
 	stage = "DecodeResponse"
 	result, err := decodeListSubmissionsResponse(resp)
 	if err != nil {
 		return res, errors.Wrap(err, "decode response")
 	}
 	return result, nil
 }
 // PatchSubmissionCompleted invokes patchSubmissionCompleted operation.
 //
 // Retrieve map with ID.
 //
 // PATCH /submissions/{SubmissionID}/completed
 func (c *Client) PatchSubmissionCompleted(ctx context.Context, params PatchSubmissionCompletedParams) error {
 	_, err := c.sendPatchSubmissionCompleted(ctx, params)
 	return err
 }
 func (c *Client) sendPatchSubmissionCompleted(ctx context.Context, params PatchSubmissionCompletedParams) (res *PatchSubmissionCompletedOK, err error) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("patchSubmissionCompleted"),
 		semconv.HTTPRequestMethodKey.String("PATCH"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}/completed"),
 	}
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		elapsedDuration := time.Since(startTime)
 		c.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), metric.WithAttributes(otelAttrs...))
 	}()
 	// Increment request counter.
 	c.requests.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 	// Start a span for this request.
 	ctx, span := c.cfg.Tracer.Start(ctx, "PatchSubmissionCompleted",
 		trace.WithAttributes(otelAttrs...),
 		clientSpanKind,
 	)
 	// Track stage for error reporting.
 	var stage string
 	defer func() {
 		if err != nil {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			c.errors.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 		}
 		span.End()
 	}()
 	stage = "BuildURL"
 	u := uri.Clone(c.requestURL(ctx))
 	var pathParts [3]string
 	pathParts[0] = "/submissions/"
 	{
 		// Encode "SubmissionID" parameter.
 		e := uri.NewPathEncoder(uri.PathEncoderConfig{
 			Param:   "SubmissionID",
 			Style:   uri.PathStyleSimple,
 			Explode: false,
 		})
 		if err := func() error {
 			return e.EncodeValue(conv.Int64ToString(params.SubmissionID))
 		}(); err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		encoded, err := e.Result()
 		if err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		pathParts[1] = encoded
 	}
 	pathParts[2] = "/completed"
 	uri.AddPathParts(u, pathParts[:]...)
 	stage = "EncodeQueryParams"
 	q := uri.NewQueryEncoder()
 	{
 		// Encode "Completed" parameter.
 		cfg := uri.QueryParameterEncodingConfig{
 			Name:    "Completed",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.EncodeParam(cfg, func(e uri.Encoder) error {
 			return e.EncodeValue(conv.BoolToString(params.Completed))
 		}); err != nil {
 			return res, errors.Wrap(err, "encode query")
 		}
 	}
 	u.RawQuery = q.Values().Encode()
 	stage = "EncodeRequest"
 	r, err := ht.NewRequest(ctx, "PATCH", u)
 	if err != nil {
 		return res, errors.Wrap(err, "create request")
 	}
 	stage = "SendRequest"
 	resp, err := c.cfg.Client.Do(r)
 	if err != nil {
 		return res, errors.Wrap(err, "do request")
 	}
 	defer resp.Body.Close()
 	stage = "DecodeResponse"
 	result, err := decodePatchSubmissionCompletedResponse(resp)
 	if err != nil {
 		return res, errors.Wrap(err, "decode response")
 	}
 	return result, nil
 }
 // PatchSubmissionModel invokes patchSubmissionModel operation.
 //
 // Update model following role restrictions.
 //
 // PATCH /submissions/{SubmissionID}/model
 func (c *Client) PatchSubmissionModel(ctx context.Context, params PatchSubmissionModelParams) error {
 	_, err := c.sendPatchSubmissionModel(ctx, params)
 	return err
 }
 func (c *Client) sendPatchSubmissionModel(ctx context.Context, params PatchSubmissionModelParams) (res *PatchSubmissionModelOK, err error) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("patchSubmissionModel"),
 		semconv.HTTPRequestMethodKey.String("PATCH"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}/model"),
 	}
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		elapsedDuration := time.Since(startTime)
 		c.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), metric.WithAttributes(otelAttrs...))
 	}()
 	// Increment request counter.
 	c.requests.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 	// Start a span for this request.
 	ctx, span := c.cfg.Tracer.Start(ctx, "PatchSubmissionModel",
 		trace.WithAttributes(otelAttrs...),
 		clientSpanKind,
 	)
 	// Track stage for error reporting.
 	var stage string
 	defer func() {
 		if err != nil {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			c.errors.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 		}
 		span.End()
 	}()
 	stage = "BuildURL"
 	u := uri.Clone(c.requestURL(ctx))
 	var pathParts [3]string
 	pathParts[0] = "/submissions/"
 	{
 		// Encode "SubmissionID" parameter.
 		e := uri.NewPathEncoder(uri.PathEncoderConfig{
 			Param:   "SubmissionID",
 			Style:   uri.PathStyleSimple,
 			Explode: false,
 		})
 		if err := func() error {
 			return e.EncodeValue(conv.Int64ToString(params.SubmissionID))
 		}(); err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		encoded, err := e.Result()
 		if err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		pathParts[1] = encoded
 	}
 	pathParts[2] = "/model"
 	uri.AddPathParts(u, pathParts[:]...)
 	stage = "EncodeQueryParams"
 	q := uri.NewQueryEncoder()
 	{
 		// Encode "ModelID" parameter.
 		cfg := uri.QueryParameterEncodingConfig{
 			Name:    "ModelID",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.EncodeParam(cfg, func(e uri.Encoder) error {
 			return e.EncodeValue(conv.Int64ToString(params.ModelID))
 		}); err != nil {
 			return res, errors.Wrap(err, "encode query")
 		}
 	}
 	{
 		// Encode "VersionID" parameter.
 		cfg := uri.QueryParameterEncodingConfig{
 			Name:    "VersionID",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.EncodeParam(cfg, func(e uri.Encoder) error {
 			return e.EncodeValue(conv.Int64ToString(params.VersionID))
 		}); err != nil {
 			return res, errors.Wrap(err, "encode query")
 		}
 	}
 	u.RawQuery = q.Values().Encode()
 	stage = "EncodeRequest"
 	r, err := ht.NewRequest(ctx, "PATCH", u)
 	if err != nil {
 		return res, errors.Wrap(err, "create request")
 	}
 	stage = "SendRequest"
 	resp, err := c.cfg.Client.Do(r)
 	if err != nil {
 		return res, errors.Wrap(err, "do request")
 	}
 	defer resp.Body.Close()
 	stage = "DecodeResponse"
 	result, err := decodePatchSubmissionModelResponse(resp)
 	if err != nil {
 		return res, errors.Wrap(err, "decode response")
 	}
 	return result, nil
 }
 // PatchSubmissionStatus invokes patchSubmissionStatus operation.
 //
 // Update status following role restrictions.
 //
 // PATCH /submissions/{SubmissionID}/status
 func (c *Client) PatchSubmissionStatus(ctx context.Context, params PatchSubmissionStatusParams) error {
 	_, err := c.sendPatchSubmissionStatus(ctx, params)
 	return err
 }
 func (c *Client) sendPatchSubmissionStatus(ctx context.Context, params PatchSubmissionStatusParams) (res *PatchSubmissionStatusOK, err error) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("patchSubmissionStatus"),
 		semconv.HTTPRequestMethodKey.String("PATCH"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}/status"),
 	}
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		elapsedDuration := time.Since(startTime)
 		c.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), metric.WithAttributes(otelAttrs...))
 	}()
 	// Increment request counter.
 	c.requests.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 	// Start a span for this request.
 	ctx, span := c.cfg.Tracer.Start(ctx, "PatchSubmissionStatus",
 		trace.WithAttributes(otelAttrs...),
 		clientSpanKind,
 	)
 	// Track stage for error reporting.
 	var stage string
 	defer func() {
 		if err != nil {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			c.errors.Add(ctx, 1, metric.WithAttributes(otelAttrs...))
 		}
 		span.End()
 	}()
 	stage = "BuildURL"
 	u := uri.Clone(c.requestURL(ctx))
 	var pathParts [3]string
 	pathParts[0] = "/submissions/"
 	{
 		// Encode "SubmissionID" parameter.
 		e := uri.NewPathEncoder(uri.PathEncoderConfig{
 			Param:   "SubmissionID",
 			Style:   uri.PathStyleSimple,
 			Explode: false,
 		})
 		if err := func() error {
 			return e.EncodeValue(conv.Int64ToString(params.SubmissionID))
 		}(); err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		encoded, err := e.Result()
 		if err != nil {
 			return res, errors.Wrap(err, "encode path")
 		}
 		pathParts[1] = encoded
 	}
 	pathParts[2] = "/status"
 	uri.AddPathParts(u, pathParts[:]...)
 	stage = "EncodeQueryParams"
 	q := uri.NewQueryEncoder()
 	{
 		// Encode "Status" parameter.
 		cfg := uri.QueryParameterEncodingConfig{
 			Name:    "Status",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.EncodeParam(cfg, func(e uri.Encoder) error {
 			return e.EncodeValue(conv.Int32ToString(params.Status))
 		}); err != nil {
 			return res, errors.Wrap(err, "encode query")
 		}
 	}
 	u.RawQuery = q.Values().Encode()
 	stage = "EncodeRequest"
 	r, err := ht.NewRequest(ctx, "PATCH", u)
 	if err != nil {
 		return res, errors.Wrap(err, "create request")
 	}
 	stage = "SendRequest"
 	resp, err := c.cfg.Client.Do(r)
 	if err != nil {
 		return res, errors.Wrap(err, "do request")
 	}
 	defer resp.Body.Close()
 	stage = "DecodeResponse"
 	result, err := decodePatchSubmissionStatusResponse(resp)
 	if err != nil {
 		return res, errors.Wrap(err, "decode response")
 	}
 	return result, nil
 }
--- a/api/oas_handlers_gen.go
+++ b/api/oas_handlers_gen.go
@ -1,760 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 	"net/http"
 	"time"
 	"github.com/go-faster/errors"
 	"go.opentelemetry.io/otel/attribute"
 	"go.opentelemetry.io/otel/codes"
 	"go.opentelemetry.io/otel/metric"
 	semconv "go.opentelemetry.io/otel/semconv/v1.26.0"
 	"go.opentelemetry.io/otel/trace"
 	ht "github.com/ogen-go/ogen/http"
 	"github.com/ogen-go/ogen/middleware"
 	"github.com/ogen-go/ogen/ogenerrors"
 	"github.com/ogen-go/ogen/otelogen"
 )
 // handleCreateSubmissionRequest handles createSubmission operation.
 //
 // Create new submission.
 //
 // POST /submissions
 func (s *Server) handleCreateSubmissionRequest(args [0]string, argsEscaped bool, w http.ResponseWriter, r *http.Request) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("createSubmission"),
 		semconv.HTTPRequestMethodKey.String("POST"),
 		semconv.HTTPRouteKey.String("/submissions"),
 	}
 	// Start a span for this request.
 	ctx, span := s.cfg.Tracer.Start(r.Context(), "CreateSubmission",
 		trace.WithAttributes(otelAttrs...),
 		serverSpanKind,
 	)
 	defer span.End()
 	// Add Labeler to context.
 	labeler := &Labeler{attrs: otelAttrs}
 	ctx = contextWithLabeler(ctx, labeler)
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		elapsedDuration := time.Since(startTime)
 		attrOpt := metric.WithAttributeSet(labeler.AttributeSet())
 		// Increment request counter.
 		s.requests.Add(ctx, 1, attrOpt)
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		s.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), attrOpt)
 	}()
 	var (
 		recordError = func(stage string, err error) {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			s.errors.Add(ctx, 1, metric.WithAttributeSet(labeler.AttributeSet()))
 		}
 		err error
 	)
 	var response *Submission
 	if m := s.cfg.Middleware; m != nil {
 		mreq := middleware.Request{
 			Context:          ctx,
 			OperationName:    "CreateSubmission",
 			OperationSummary: "Create new submission",
 			OperationID:      "createSubmission",
 			Body:             nil,
 			Params:           middleware.Parameters{},
 			Raw:              r,
 		}
 		type (
 			Request  = struct{}
 			Params   = struct{}
 			Response = *Submission
 		)
 		response, err = middleware.HookMiddleware[
 			Request,
 			Params,
 			Response,
 		](
 			m,
 			mreq,
 			nil,
 			func(ctx context.Context, request Request, params Params) (response Response, err error) {
 				response, err = s.h.CreateSubmission(ctx)
 				return response, err
 			},
 		)
 	} else {
 		response, err = s.h.CreateSubmission(ctx)
 	}
 	if err != nil {
 		if errRes, ok := errors.Into[*ErrorStatusCode](err); ok {
 			if err := encodeErrorResponse(errRes, w, span); err != nil {
 				defer recordError("Internal", err)
 			}
 			return
 		}
 		if errors.Is(err, ht.ErrNotImplemented) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 			return
 		}
 		if err := encodeErrorResponse(s.h.NewError(ctx, err), w, span); err != nil {
 			defer recordError("Internal", err)
 		}
 		return
 	}
 	if err := encodeCreateSubmissionResponse(response, w, span); err != nil {
 		defer recordError("EncodeResponse", err)
 		if !errors.Is(err, ht.ErrInternalServerErrorResponse) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 		}
 		return
 	}
 }
 // handleGetSubmissionRequest handles getSubmission operation.
 //
 // Retrieve map with ID.
 //
 // GET /submissions/{SubmissionID}
 func (s *Server) handleGetSubmissionRequest(args [1]string, argsEscaped bool, w http.ResponseWriter, r *http.Request) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("getSubmission"),
 		semconv.HTTPRequestMethodKey.String("GET"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}"),
 	}
 	// Start a span for this request.
 	ctx, span := s.cfg.Tracer.Start(r.Context(), "GetSubmission",
 		trace.WithAttributes(otelAttrs...),
 		serverSpanKind,
 	)
 	defer span.End()
 	// Add Labeler to context.
 	labeler := &Labeler{attrs: otelAttrs}
 	ctx = contextWithLabeler(ctx, labeler)
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		elapsedDuration := time.Since(startTime)
 		attrOpt := metric.WithAttributeSet(labeler.AttributeSet())
 		// Increment request counter.
 		s.requests.Add(ctx, 1, attrOpt)
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		s.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), attrOpt)
 	}()
 	var (
 		recordError = func(stage string, err error) {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			s.errors.Add(ctx, 1, metric.WithAttributeSet(labeler.AttributeSet()))
 		}
 		err          error
 		opErrContext = ogenerrors.OperationContext{
 			Name: "GetSubmission",
 			ID:   "getSubmission",
 		}
 	)
 	params, err := decodeGetSubmissionParams(args, argsEscaped, r)
 	if err != nil {
 		err = &ogenerrors.DecodeParamsError{
 			OperationContext: opErrContext,
 			Err:              err,
 		}
 		defer recordError("DecodeParams", err)
 		s.cfg.ErrorHandler(ctx, w, r, err)
 		return
 	}
 	var response *Submission
 	if m := s.cfg.Middleware; m != nil {
 		mreq := middleware.Request{
 			Context:          ctx,
 			OperationName:    "GetSubmission",
 			OperationSummary: "Retrieve map with ID",
 			OperationID:      "getSubmission",
 			Body:             nil,
 			Params: middleware.Parameters{
 				{
 					Name: "SubmissionID",
 					In:   "path",
 				}: params.SubmissionID,
 			},
 			Raw: r,
 		}
 		type (
 			Request  = struct{}
 			Params   = GetSubmissionParams
 			Response = *Submission
 		)
 		response, err = middleware.HookMiddleware[
 			Request,
 			Params,
 			Response,
 		](
 			m,
 			mreq,
 			unpackGetSubmissionParams,
 			func(ctx context.Context, request Request, params Params) (response Response, err error) {
 				response, err = s.h.GetSubmission(ctx, params)
 				return response, err
 			},
 		)
 	} else {
 		response, err = s.h.GetSubmission(ctx, params)
 	}
 	if err != nil {
 		if errRes, ok := errors.Into[*ErrorStatusCode](err); ok {
 			if err := encodeErrorResponse(errRes, w, span); err != nil {
 				defer recordError("Internal", err)
 			}
 			return
 		}
 		if errors.Is(err, ht.ErrNotImplemented) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 			return
 		}
 		if err := encodeErrorResponse(s.h.NewError(ctx, err), w, span); err != nil {
 			defer recordError("Internal", err)
 		}
 		return
 	}
 	if err := encodeGetSubmissionResponse(response, w, span); err != nil {
 		defer recordError("EncodeResponse", err)
 		if !errors.Is(err, ht.ErrInternalServerErrorResponse) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 		}
 		return
 	}
 }
 // handleListSubmissionsRequest handles listSubmissions operation.
 //
 // Get list of submissions.
 //
 // GET /submissions
 func (s *Server) handleListSubmissionsRequest(args [0]string, argsEscaped bool, w http.ResponseWriter, r *http.Request) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("listSubmissions"),
 		semconv.HTTPRequestMethodKey.String("GET"),
 		semconv.HTTPRouteKey.String("/submissions"),
 	}
 	// Start a span for this request.
 	ctx, span := s.cfg.Tracer.Start(r.Context(), "ListSubmissions",
 		trace.WithAttributes(otelAttrs...),
 		serverSpanKind,
 	)
 	defer span.End()
 	// Add Labeler to context.
 	labeler := &Labeler{attrs: otelAttrs}
 	ctx = contextWithLabeler(ctx, labeler)
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		elapsedDuration := time.Since(startTime)
 		attrOpt := metric.WithAttributeSet(labeler.AttributeSet())
 		// Increment request counter.
 		s.requests.Add(ctx, 1, attrOpt)
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		s.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), attrOpt)
 	}()
 	var (
 		recordError = func(stage string, err error) {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			s.errors.Add(ctx, 1, metric.WithAttributeSet(labeler.AttributeSet()))
 		}
 		err          error
 		opErrContext = ogenerrors.OperationContext{
 			Name: "ListSubmissions",
 			ID:   "listSubmissions",
 		}
 	)
 	params, err := decodeListSubmissionsParams(args, argsEscaped, r)
 	if err != nil {
 		err = &ogenerrors.DecodeParamsError{
 			OperationContext: opErrContext,
 			Err:              err,
 		}
 		defer recordError("DecodeParams", err)
 		s.cfg.ErrorHandler(ctx, w, r, err)
 		return
 	}
 	var response []Submission
 	if m := s.cfg.Middleware; m != nil {
 		mreq := middleware.Request{
 			Context:          ctx,
 			OperationName:    "ListSubmissions",
 			OperationSummary: "Get list of submissions",
 			OperationID:      "listSubmissions",
 			Body:             nil,
 			Params: middleware.Parameters{
 				{
 					Name: "page",
 					In:   "query",
 				}: params.Page,
 				{
 					Name: "filter",
 					In:   "query",
 				}: params.Filter,
 			},
 			Raw: r,
 		}
 		type (
 			Request  = struct{}
 			Params   = ListSubmissionsParams
 			Response = []Submission
 		)
 		response, err = middleware.HookMiddleware[
 			Request,
 			Params,
 			Response,
 		](
 			m,
 			mreq,
 			unpackListSubmissionsParams,
 			func(ctx context.Context, request Request, params Params) (response Response, err error) {
 				response, err = s.h.ListSubmissions(ctx, params)
 				return response, err
 			},
 		)
 	} else {
 		response, err = s.h.ListSubmissions(ctx, params)
 	}
 	if err != nil {
 		if errRes, ok := errors.Into[*ErrorStatusCode](err); ok {
 			if err := encodeErrorResponse(errRes, w, span); err != nil {
 				defer recordError("Internal", err)
 			}
 			return
 		}
 		if errors.Is(err, ht.ErrNotImplemented) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 			return
 		}
 		if err := encodeErrorResponse(s.h.NewError(ctx, err), w, span); err != nil {
 			defer recordError("Internal", err)
 		}
 		return
 	}
 	if err := encodeListSubmissionsResponse(response, w, span); err != nil {
 		defer recordError("EncodeResponse", err)
 		if !errors.Is(err, ht.ErrInternalServerErrorResponse) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 		}
 		return
 	}
 }
 // handlePatchSubmissionCompletedRequest handles patchSubmissionCompleted operation.
 //
 // Retrieve map with ID.
 //
 // PATCH /submissions/{SubmissionID}/completed
 func (s *Server) handlePatchSubmissionCompletedRequest(args [1]string, argsEscaped bool, w http.ResponseWriter, r *http.Request) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("patchSubmissionCompleted"),
 		semconv.HTTPRequestMethodKey.String("PATCH"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}/completed"),
 	}
 	// Start a span for this request.
 	ctx, span := s.cfg.Tracer.Start(r.Context(), "PatchSubmissionCompleted",
 		trace.WithAttributes(otelAttrs...),
 		serverSpanKind,
 	)
 	defer span.End()
 	// Add Labeler to context.
 	labeler := &Labeler{attrs: otelAttrs}
 	ctx = contextWithLabeler(ctx, labeler)
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		elapsedDuration := time.Since(startTime)
 		attrOpt := metric.WithAttributeSet(labeler.AttributeSet())
 		// Increment request counter.
 		s.requests.Add(ctx, 1, attrOpt)
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		s.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), attrOpt)
 	}()
 	var (
 		recordError = func(stage string, err error) {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			s.errors.Add(ctx, 1, metric.WithAttributeSet(labeler.AttributeSet()))
 		}
 		err          error
 		opErrContext = ogenerrors.OperationContext{
 			Name: "PatchSubmissionCompleted",
 			ID:   "patchSubmissionCompleted",
 		}
 	)
 	params, err := decodePatchSubmissionCompletedParams(args, argsEscaped, r)
 	if err != nil {
 		err = &ogenerrors.DecodeParamsError{
 			OperationContext: opErrContext,
 			Err:              err,
 		}
 		defer recordError("DecodeParams", err)
 		s.cfg.ErrorHandler(ctx, w, r, err)
 		return
 	}
 	var response *PatchSubmissionCompletedOK
 	if m := s.cfg.Middleware; m != nil {
 		mreq := middleware.Request{
 			Context:          ctx,
 			OperationName:    "PatchSubmissionCompleted",
 			OperationSummary: "Retrieve map with ID",
 			OperationID:      "patchSubmissionCompleted",
 			Body:             nil,
 			Params: middleware.Parameters{
 				{
 					Name: "SubmissionID",
 					In:   "path",
 				}: params.SubmissionID,
 				{
 					Name: "Completed",
 					In:   "query",
 				}: params.Completed,
 			},
 			Raw: r,
 		}
 		type (
 			Request  = struct{}
 			Params   = PatchSubmissionCompletedParams
 			Response = *PatchSubmissionCompletedOK
 		)
 		response, err = middleware.HookMiddleware[
 			Request,
 			Params,
 			Response,
 		](
 			m,
 			mreq,
 			unpackPatchSubmissionCompletedParams,
 			func(ctx context.Context, request Request, params Params) (response Response, err error) {
 				err = s.h.PatchSubmissionCompleted(ctx, params)
 				return response, err
 			},
 		)
 	} else {
 		err = s.h.PatchSubmissionCompleted(ctx, params)
 	}
 	if err != nil {
 		if errRes, ok := errors.Into[*ErrorStatusCode](err); ok {
 			if err := encodeErrorResponse(errRes, w, span); err != nil {
 				defer recordError("Internal", err)
 			}
 			return
 		}
 		if errors.Is(err, ht.ErrNotImplemented) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 			return
 		}
 		if err := encodeErrorResponse(s.h.NewError(ctx, err), w, span); err != nil {
 			defer recordError("Internal", err)
 		}
 		return
 	}
 	if err := encodePatchSubmissionCompletedResponse(response, w, span); err != nil {
 		defer recordError("EncodeResponse", err)
 		if !errors.Is(err, ht.ErrInternalServerErrorResponse) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 		}
 		return
 	}
 }
 // handlePatchSubmissionModelRequest handles patchSubmissionModel operation.
 //
 // Update model following role restrictions.
 //
 // PATCH /submissions/{SubmissionID}/model
 func (s *Server) handlePatchSubmissionModelRequest(args [1]string, argsEscaped bool, w http.ResponseWriter, r *http.Request) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("patchSubmissionModel"),
 		semconv.HTTPRequestMethodKey.String("PATCH"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}/model"),
 	}
 	// Start a span for this request.
 	ctx, span := s.cfg.Tracer.Start(r.Context(), "PatchSubmissionModel",
 		trace.WithAttributes(otelAttrs...),
 		serverSpanKind,
 	)
 	defer span.End()
 	// Add Labeler to context.
 	labeler := &Labeler{attrs: otelAttrs}
 	ctx = contextWithLabeler(ctx, labeler)
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		elapsedDuration := time.Since(startTime)
 		attrOpt := metric.WithAttributeSet(labeler.AttributeSet())
 		// Increment request counter.
 		s.requests.Add(ctx, 1, attrOpt)
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		s.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), attrOpt)
 	}()
 	var (
 		recordError = func(stage string, err error) {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			s.errors.Add(ctx, 1, metric.WithAttributeSet(labeler.AttributeSet()))
 		}
 		err          error
 		opErrContext = ogenerrors.OperationContext{
 			Name: "PatchSubmissionModel",
 			ID:   "patchSubmissionModel",
 		}
 	)
 	params, err := decodePatchSubmissionModelParams(args, argsEscaped, r)
 	if err != nil {
 		err = &ogenerrors.DecodeParamsError{
 			OperationContext: opErrContext,
 			Err:              err,
 		}
 		defer recordError("DecodeParams", err)
 		s.cfg.ErrorHandler(ctx, w, r, err)
 		return
 	}
 	var response *PatchSubmissionModelOK
 	if m := s.cfg.Middleware; m != nil {
 		mreq := middleware.Request{
 			Context:          ctx,
 			OperationName:    "PatchSubmissionModel",
 			OperationSummary: "Update model following role restrictions",
 			OperationID:      "patchSubmissionModel",
 			Body:             nil,
 			Params: middleware.Parameters{
 				{
 					Name: "SubmissionID",
 					In:   "path",
 				}: params.SubmissionID,
 				{
 					Name: "ModelID",
 					In:   "query",
 				}: params.ModelID,
 				{
 					Name: "VersionID",
 					In:   "query",
 				}: params.VersionID,
 			},
 			Raw: r,
 		}
 		type (
 			Request  = struct{}
 			Params   = PatchSubmissionModelParams
 			Response = *PatchSubmissionModelOK
 		)
 		response, err = middleware.HookMiddleware[
 			Request,
 			Params,
 			Response,
 		](
 			m,
 			mreq,
 			unpackPatchSubmissionModelParams,
 			func(ctx context.Context, request Request, params Params) (response Response, err error) {
 				err = s.h.PatchSubmissionModel(ctx, params)
 				return response, err
 			},
 		)
 	} else {
 		err = s.h.PatchSubmissionModel(ctx, params)
 	}
 	if err != nil {
 		if errRes, ok := errors.Into[*ErrorStatusCode](err); ok {
 			if err := encodeErrorResponse(errRes, w, span); err != nil {
 				defer recordError("Internal", err)
 			}
 			return
 		}
 		if errors.Is(err, ht.ErrNotImplemented) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 			return
 		}
 		if err := encodeErrorResponse(s.h.NewError(ctx, err), w, span); err != nil {
 			defer recordError("Internal", err)
 		}
 		return
 	}
 	if err := encodePatchSubmissionModelResponse(response, w, span); err != nil {
 		defer recordError("EncodeResponse", err)
 		if !errors.Is(err, ht.ErrInternalServerErrorResponse) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 		}
 		return
 	}
 }
 // handlePatchSubmissionStatusRequest handles patchSubmissionStatus operation.
 //
 // Update status following role restrictions.
 //
 // PATCH /submissions/{SubmissionID}/status
 func (s *Server) handlePatchSubmissionStatusRequest(args [1]string, argsEscaped bool, w http.ResponseWriter, r *http.Request) {
 	otelAttrs := []attribute.KeyValue{
 		otelogen.OperationID("patchSubmissionStatus"),
 		semconv.HTTPRequestMethodKey.String("PATCH"),
 		semconv.HTTPRouteKey.String("/submissions/{SubmissionID}/status"),
 	}
 	// Start a span for this request.
 	ctx, span := s.cfg.Tracer.Start(r.Context(), "PatchSubmissionStatus",
 		trace.WithAttributes(otelAttrs...),
 		serverSpanKind,
 	)
 	defer span.End()
 	// Add Labeler to context.
 	labeler := &Labeler{attrs: otelAttrs}
 	ctx = contextWithLabeler(ctx, labeler)
 	// Run stopwatch.
 	startTime := time.Now()
 	defer func() {
 		elapsedDuration := time.Since(startTime)
 		attrOpt := metric.WithAttributeSet(labeler.AttributeSet())
 		// Increment request counter.
 		s.requests.Add(ctx, 1, attrOpt)
 		// Use floating point division here for higher precision (instead of Millisecond method).
 		s.duration.Record(ctx, float64(float64(elapsedDuration)/float64(time.Millisecond)), attrOpt)
 	}()
 	var (
 		recordError = func(stage string, err error) {
 			span.RecordError(err)
 			span.SetStatus(codes.Error, stage)
 			s.errors.Add(ctx, 1, metric.WithAttributeSet(labeler.AttributeSet()))
 		}
 		err          error
 		opErrContext = ogenerrors.OperationContext{
 			Name: "PatchSubmissionStatus",
 			ID:   "patchSubmissionStatus",
 		}
 	)
 	params, err := decodePatchSubmissionStatusParams(args, argsEscaped, r)
 	if err != nil {
 		err = &ogenerrors.DecodeParamsError{
 			OperationContext: opErrContext,
 			Err:              err,
 		}
 		defer recordError("DecodeParams", err)
 		s.cfg.ErrorHandler(ctx, w, r, err)
 		return
 	}
 	var response *PatchSubmissionStatusOK
 	if m := s.cfg.Middleware; m != nil {
 		mreq := middleware.Request{
 			Context:          ctx,
 			OperationName:    "PatchSubmissionStatus",
 			OperationSummary: "Update status following role restrictions",
 			OperationID:      "patchSubmissionStatus",
 			Body:             nil,
 			Params: middleware.Parameters{
 				{
 					Name: "SubmissionID",
 					In:   "path",
 				}: params.SubmissionID,
 				{
 					Name: "Status",
 					In:   "query",
 				}: params.Status,
 			},
 			Raw: r,
 		}
 		type (
 			Request  = struct{}
 			Params   = PatchSubmissionStatusParams
 			Response = *PatchSubmissionStatusOK
 		)
 		response, err = middleware.HookMiddleware[
 			Request,
 			Params,
 			Response,
 		](
 			m,
 			mreq,
 			unpackPatchSubmissionStatusParams,
 			func(ctx context.Context, request Request, params Params) (response Response, err error) {
 				err = s.h.PatchSubmissionStatus(ctx, params)
 				return response, err
 			},
 		)
 	} else {
 		err = s.h.PatchSubmissionStatus(ctx, params)
 	}
 	if err != nil {
 		if errRes, ok := errors.Into[*ErrorStatusCode](err); ok {
 			if err := encodeErrorResponse(errRes, w, span); err != nil {
 				defer recordError("Internal", err)
 			}
 			return
 		}
 		if errors.Is(err, ht.ErrNotImplemented) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 			return
 		}
 		if err := encodeErrorResponse(s.h.NewError(ctx, err), w, span); err != nil {
 			defer recordError("Internal", err)
 		}
 		return
 	}
 	if err := encodePatchSubmissionStatusResponse(response, w, span); err != nil {
 		defer recordError("EncodeResponse", err)
 		if !errors.Is(err, ht.ErrInternalServerErrorResponse) {
 			s.cfg.ErrorHandler(ctx, w, r, err)
 		}
 		return
 	}
 }
--- a/api/oas_json_gen.go
+++ b/api/oas_json_gen.go
@ -1,362 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"math/bits"
 	"strconv"
 	"github.com/go-faster/errors"
 	"github.com/go-faster/jx"
 	"github.com/ogen-go/ogen/validate"
 )
 // Encode implements json.Marshaler.
 func (s *Error) Encode(e *jx.Encoder) {
 	e.ObjStart()
 	s.encodeFields(e)
 	e.ObjEnd()
 }
 // encodeFields encodes fields.
 func (s *Error) encodeFields(e *jx.Encoder) {
 	{
 		e.FieldStart("code")
 		e.Int64(s.Code)
 	}
 	{
 		e.FieldStart("message")
 		e.Str(s.Message)
 	}
 }
 var jsonFieldsNameOfError = [2]string{
 	0: "code",
 	1: "message",
 }
 // Decode decodes Error from json.
 func (s *Error) Decode(d *jx.Decoder) error {
 	if s == nil {
 		return errors.New("invalid: unable to decode Error to nil")
 	}
 	var requiredBitSet [1]uint8
 	if err := d.ObjBytes(func(d *jx.Decoder, k []byte) error {
 		switch string(k) {
 		case "code":
 			requiredBitSet[0] |= 1 << 0
 			if err := func() error {
 				v, err := d.Int64()
 				s.Code = int64(v)
 				if err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"code\"")
 			}
 		case "message":
 			requiredBitSet[0] |= 1 << 1
 			if err := func() error {
 				v, err := d.Str()
 				s.Message = string(v)
 				if err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"message\"")
 			}
 		default:
 			return d.Skip()
 		}
 		return nil
 	}); err != nil {
 		return errors.Wrap(err, "decode Error")
 	}
 	// Validate required fields.
 	var failures []validate.FieldError
 	for i, mask := range [1]uint8{
 		0b00000011,
 	} {
 		if result := (requiredBitSet[i] & mask) ^ mask; result != 0 {
 			// Mask only required fields and check equality to mask using XOR.
 			//
 			// If XOR result is not zero, result is not equal to expected, so some fields are missed.
 			// Bits of fields which would be set are actually bits of missed fields.
 			missed := bits.OnesCount8(result)
 			for bitN := 0; bitN < missed; bitN++ {
 				bitIdx := bits.TrailingZeros8(result)
 				fieldIdx := i*8 + bitIdx
 				var name string
 				if fieldIdx < len(jsonFieldsNameOfError) {
 					name = jsonFieldsNameOfError[fieldIdx]
 				} else {
 					name = strconv.Itoa(fieldIdx)
 				}
 				failures = append(failures, validate.FieldError{
 					Name:  name,
 					Error: validate.ErrFieldRequired,
 				})
 				// Reset bit.
 				result &^= 1 << bitIdx
 			}
 		}
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 // MarshalJSON implements stdjson.Marshaler.
 func (s *Error) MarshalJSON() ([]byte, error) {
 	e := jx.Encoder{}
 	s.Encode(&e)
 	return e.Bytes(), nil
 }
 // UnmarshalJSON implements stdjson.Unmarshaler.
 func (s *Error) UnmarshalJSON(data []byte) error {
 	d := jx.DecodeBytes(data)
 	return s.Decode(d)
 }
 // Encode encodes int32 as json.
 func (o OptInt32) Encode(e *jx.Encoder) {
 	if !o.Set {
 		return
 	}
 	e.Int32(int32(o.Value))
 }
 // Decode decodes int32 from json.
 func (o *OptInt32) Decode(d *jx.Decoder) error {
 	if o == nil {
 		return errors.New("invalid: unable to decode OptInt32 to nil")
 	}
 	o.Set = true
 	v, err := d.Int32()
 	if err != nil {
 		return err
 	}
 	o.Value = int32(v)
 	return nil
 }
 // MarshalJSON implements stdjson.Marshaler.
 func (s OptInt32) MarshalJSON() ([]byte, error) {
 	e := jx.Encoder{}
 	s.Encode(&e)
 	return e.Bytes(), nil
 }
 // UnmarshalJSON implements stdjson.Unmarshaler.
 func (s *OptInt32) UnmarshalJSON(data []byte) error {
 	d := jx.DecodeBytes(data)
 	return s.Decode(d)
 }
 // Encode encodes int64 as json.
 func (o OptInt64) Encode(e *jx.Encoder) {
 	if !o.Set {
 		return
 	}
 	e.Int64(int64(o.Value))
 }
 // Decode decodes int64 from json.
 func (o *OptInt64) Decode(d *jx.Decoder) error {
 	if o == nil {
 		return errors.New("invalid: unable to decode OptInt64 to nil")
 	}
 	o.Set = true
 	v, err := d.Int64()
 	if err != nil {
 		return err
 	}
 	o.Value = int64(v)
 	return nil
 }
 // MarshalJSON implements stdjson.Marshaler.
 func (s OptInt64) MarshalJSON() ([]byte, error) {
 	e := jx.Encoder{}
 	s.Encode(&e)
 	return e.Bytes(), nil
 }
 // UnmarshalJSON implements stdjson.Unmarshaler.
 func (s *OptInt64) UnmarshalJSON(data []byte) error {
 	d := jx.DecodeBytes(data)
 	return s.Decode(d)
 }
 // Encode encodes string as json.
 func (o OptString) Encode(e *jx.Encoder) {
 	if !o.Set {
 		return
 	}
 	e.Str(string(o.Value))
 }
 // Decode decodes string from json.
 func (o *OptString) Decode(d *jx.Decoder) error {
 	if o == nil {
 		return errors.New("invalid: unable to decode OptString to nil")
 	}
 	o.Set = true
 	v, err := d.Str()
 	if err != nil {
 		return err
 	}
 	o.Value = string(v)
 	return nil
 }
 // MarshalJSON implements stdjson.Marshaler.
 func (s OptString) MarshalJSON() ([]byte, error) {
 	e := jx.Encoder{}
 	s.Encode(&e)
 	return e.Bytes(), nil
 }
 // UnmarshalJSON implements stdjson.Unmarshaler.
 func (s *OptString) UnmarshalJSON(data []byte) error {
 	d := jx.DecodeBytes(data)
 	return s.Decode(d)
 }
 // Encode implements json.Marshaler.
 func (s *Submission) Encode(e *jx.Encoder) {
 	e.ObjStart()
 	s.encodeFields(e)
 	e.ObjEnd()
 }
 // encodeFields encodes fields.
 func (s *Submission) encodeFields(e *jx.Encoder) {
 	{
 		if s.ID.Set {
 			e.FieldStart("ID")
 			s.ID.Encode(e)
 		}
 	}
 	{
 		if s.DisplayName.Set {
 			e.FieldStart("DisplayName")
 			s.DisplayName.Encode(e)
 		}
 	}
 	{
 		if s.Creator.Set {
 			e.FieldStart("Creator")
 			s.Creator.Encode(e)
 		}
 	}
 	{
 		if s.GameID.Set {
 			e.FieldStart("GameID")
 			s.GameID.Encode(e)
 		}
 	}
 	{
 		if s.Date.Set {
 			e.FieldStart("Date")
 			s.Date.Encode(e)
 		}
 	}
 }
 var jsonFieldsNameOfSubmission = [5]string{
 	0: "ID",
 	1: "DisplayName",
 	2: "Creator",
 	3: "GameID",
 	4: "Date",
 }
 // Decode decodes Submission from json.
 func (s *Submission) Decode(d *jx.Decoder) error {
 	if s == nil {
 		return errors.New("invalid: unable to decode Submission to nil")
 	}
 	if err := d.ObjBytes(func(d *jx.Decoder, k []byte) error {
 		switch string(k) {
 		case "ID":
 			if err := func() error {
 				s.ID.Reset()
 				if err := s.ID.Decode(d); err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"ID\"")
 			}
 		case "DisplayName":
 			if err := func() error {
 				s.DisplayName.Reset()
 				if err := s.DisplayName.Decode(d); err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"DisplayName\"")
 			}
 		case "Creator":
 			if err := func() error {
 				s.Creator.Reset()
 				if err := s.Creator.Decode(d); err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"Creator\"")
 			}
 		case "GameID":
 			if err := func() error {
 				s.GameID.Reset()
 				if err := s.GameID.Decode(d); err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"GameID\"")
 			}
 		case "Date":
 			if err := func() error {
 				s.Date.Reset()
 				if err := s.Date.Decode(d); err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"Date\"")
 			}
 		default:
 			return d.Skip()
 		}
 		return nil
 	}); err != nil {
 		return errors.Wrap(err, "decode Submission")
 	}
 	return nil
 }
 // MarshalJSON implements stdjson.Marshaler.
 func (s *Submission) MarshalJSON() ([]byte, error) {
 	e := jx.Encoder{}
 	s.Encode(&e)
 	return e.Bytes(), nil
 }
 // UnmarshalJSON implements stdjson.Unmarshaler.
 func (s *Submission) UnmarshalJSON(data []byte) error {
 	d := jx.DecodeBytes(data)
 	return s.Decode(d)
 }
--- a/api/oas_parameters_gen.go
+++ b/api/oas_parameters_gen.go
@ -1,551 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"net/http"
 	"net/url"
 	"github.com/go-faster/errors"
 	"github.com/ogen-go/ogen/conv"
 	"github.com/ogen-go/ogen/middleware"
 	"github.com/ogen-go/ogen/ogenerrors"
 	"github.com/ogen-go/ogen/uri"
 	"github.com/ogen-go/ogen/validate"
 )
 // GetSubmissionParams is parameters of getSubmission operation.
 type GetSubmissionParams struct {
 	SubmissionID int64
 }
 func unpackGetSubmissionParams(packed middleware.Parameters) (params GetSubmissionParams) {
 	{
 		key := middleware.ParameterKey{
 			Name: "SubmissionID",
 			In:   "path",
 		}
 		params.SubmissionID = packed[key].(int64)
 	}
 	return params
 }
 func decodeGetSubmissionParams(args [1]string, argsEscaped bool, r *http.Request) (params GetSubmissionParams, _ error) {
 	// Decode path: SubmissionID.
 	if err := func() error {
 		param := args[0]
 		if argsEscaped {
 			unescaped, err := url.PathUnescape(args[0])
 			if err != nil {
 				return errors.Wrap(err, "unescape path")
 			}
 			param = unescaped
 		}
 		if len(param) > 0 {
 			d := uri.NewPathDecoder(uri.PathDecoderConfig{
 				Param:   "SubmissionID",
 				Value:   param,
 				Style:   uri.PathStyleSimple,
 				Explode: false,
 			})
 			if err := func() error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				params.SubmissionID = c
 				return nil
 			}(); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "SubmissionID",
 			In:   "path",
 			Err:  err,
 		}
 	}
 	return params, nil
 }
 // ListSubmissionsParams is parameters of listSubmissions operation.
 type ListSubmissionsParams struct {
 	Page   Pagination
 	Filter OptSubmissionFilter
 }
 func unpackListSubmissionsParams(packed middleware.Parameters) (params ListSubmissionsParams) {
 	{
 		key := middleware.ParameterKey{
 			Name: "page",
 			In:   "query",
 		}
 		params.Page = packed[key].(Pagination)
 	}
 	{
 		key := middleware.ParameterKey{
 			Name: "filter",
 			In:   "query",
 		}
 		if v, ok := packed[key]; ok {
 			params.Filter = v.(OptSubmissionFilter)
 		}
 	}
 	return params
 }
 func decodeListSubmissionsParams(args [0]string, argsEscaped bool, r *http.Request) (params ListSubmissionsParams, _ error) {
 	q := uri.NewQueryDecoder(r.URL.Query())
 	// Decode query: page.
 	if err := func() error {
 		cfg := uri.QueryParameterDecodingConfig{
 			Name:    "page",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 			Fields:  []uri.QueryParameterObjectField{{Name: "Page", Required: true}, {Name: "Limit", Required: true}},
 		}
 		if err := q.HasParam(cfg); err == nil {
 			if err := q.DecodeParam(cfg, func(d uri.Decoder) error {
 				return params.Page.DecodeURI(d)
 			}); err != nil {
 				return err
 			}
 			if err := func() error {
 				if err := params.Page.Validate(); err != nil {
 					return err
 				}
 				return nil
 			}(); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "page",
 			In:   "query",
 			Err:  err,
 		}
 	}
 	// Decode query: filter.
 	if err := func() error {
 		cfg := uri.QueryParameterDecodingConfig{
 			Name:    "filter",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 			Fields:  []uri.QueryParameterObjectField{{Name: "ID", Required: false}, {Name: "DisplayName", Required: false}, {Name: "Creator", Required: false}, {Name: "GameID", Required: false}, {Name: "Date", Required: false}},
 		}
 		if err := q.HasParam(cfg); err == nil {
 			if err := q.DecodeParam(cfg, func(d uri.Decoder) error {
 				var paramsDotFilterVal SubmissionFilter
 				if err := func() error {
 					return paramsDotFilterVal.DecodeURI(d)
 				}(); err != nil {
 					return err
 				}
 				params.Filter.SetTo(paramsDotFilterVal)
 				return nil
 			}); err != nil {
 				return err
 			}
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "filter",
 			In:   "query",
 			Err:  err,
 		}
 	}
 	return params, nil
 }
 // PatchSubmissionCompletedParams is parameters of patchSubmissionCompleted operation.
 type PatchSubmissionCompletedParams struct {
 	SubmissionID int64
 	Completed    bool
 }
 func unpackPatchSubmissionCompletedParams(packed middleware.Parameters) (params PatchSubmissionCompletedParams) {
 	{
 		key := middleware.ParameterKey{
 			Name: "SubmissionID",
 			In:   "path",
 		}
 		params.SubmissionID = packed[key].(int64)
 	}
 	{
 		key := middleware.ParameterKey{
 			Name: "Completed",
 			In:   "query",
 		}
 		params.Completed = packed[key].(bool)
 	}
 	return params
 }
 func decodePatchSubmissionCompletedParams(args [1]string, argsEscaped bool, r *http.Request) (params PatchSubmissionCompletedParams, _ error) {
 	q := uri.NewQueryDecoder(r.URL.Query())
 	// Decode path: SubmissionID.
 	if err := func() error {
 		param := args[0]
 		if argsEscaped {
 			unescaped, err := url.PathUnescape(args[0])
 			if err != nil {
 				return errors.Wrap(err, "unescape path")
 			}
 			param = unescaped
 		}
 		if len(param) > 0 {
 			d := uri.NewPathDecoder(uri.PathDecoderConfig{
 				Param:   "SubmissionID",
 				Value:   param,
 				Style:   uri.PathStyleSimple,
 				Explode: false,
 			})
 			if err := func() error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				params.SubmissionID = c
 				return nil
 			}(); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "SubmissionID",
 			In:   "path",
 			Err:  err,
 		}
 	}
 	// Decode query: Completed.
 	if err := func() error {
 		cfg := uri.QueryParameterDecodingConfig{
 			Name:    "Completed",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.HasParam(cfg); err == nil {
 			if err := q.DecodeParam(cfg, func(d uri.Decoder) error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToBool(val)
 				if err != nil {
 					return err
 				}
 				params.Completed = c
 				return nil
 			}); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "Completed",
 			In:   "query",
 			Err:  err,
 		}
 	}
 	return params, nil
 }
 // PatchSubmissionModelParams is parameters of patchSubmissionModel operation.
 type PatchSubmissionModelParams struct {
 	SubmissionID int64
 	ModelID      int64
 	VersionID    int64
 }
 func unpackPatchSubmissionModelParams(packed middleware.Parameters) (params PatchSubmissionModelParams) {
 	{
 		key := middleware.ParameterKey{
 			Name: "SubmissionID",
 			In:   "path",
 		}
 		params.SubmissionID = packed[key].(int64)
 	}
 	{
 		key := middleware.ParameterKey{
 			Name: "ModelID",
 			In:   "query",
 		}
 		params.ModelID = packed[key].(int64)
 	}
 	{
 		key := middleware.ParameterKey{
 			Name: "VersionID",
 			In:   "query",
 		}
 		params.VersionID = packed[key].(int64)
 	}
 	return params
 }
 func decodePatchSubmissionModelParams(args [1]string, argsEscaped bool, r *http.Request) (params PatchSubmissionModelParams, _ error) {
 	q := uri.NewQueryDecoder(r.URL.Query())
 	// Decode path: SubmissionID.
 	if err := func() error {
 		param := args[0]
 		if argsEscaped {
 			unescaped, err := url.PathUnescape(args[0])
 			if err != nil {
 				return errors.Wrap(err, "unescape path")
 			}
 			param = unescaped
 		}
 		if len(param) > 0 {
 			d := uri.NewPathDecoder(uri.PathDecoderConfig{
 				Param:   "SubmissionID",
 				Value:   param,
 				Style:   uri.PathStyleSimple,
 				Explode: false,
 			})
 			if err := func() error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				params.SubmissionID = c
 				return nil
 			}(); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "SubmissionID",
 			In:   "path",
 			Err:  err,
 		}
 	}
 	// Decode query: ModelID.
 	if err := func() error {
 		cfg := uri.QueryParameterDecodingConfig{
 			Name:    "ModelID",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.HasParam(cfg); err == nil {
 			if err := q.DecodeParam(cfg, func(d uri.Decoder) error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				params.ModelID = c
 				return nil
 			}); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "ModelID",
 			In:   "query",
 			Err:  err,
 		}
 	}
 	// Decode query: VersionID.
 	if err := func() error {
 		cfg := uri.QueryParameterDecodingConfig{
 			Name:    "VersionID",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.HasParam(cfg); err == nil {
 			if err := q.DecodeParam(cfg, func(d uri.Decoder) error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				params.VersionID = c
 				return nil
 			}); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "VersionID",
 			In:   "query",
 			Err:  err,
 		}
 	}
 	return params, nil
 }
 // PatchSubmissionStatusParams is parameters of patchSubmissionStatus operation.
 type PatchSubmissionStatusParams struct {
 	SubmissionID int64
 	Status       int32
 }
 func unpackPatchSubmissionStatusParams(packed middleware.Parameters) (params PatchSubmissionStatusParams) {
 	{
 		key := middleware.ParameterKey{
 			Name: "SubmissionID",
 			In:   "path",
 		}
 		params.SubmissionID = packed[key].(int64)
 	}
 	{
 		key := middleware.ParameterKey{
 			Name: "Status",
 			In:   "query",
 		}
 		params.Status = packed[key].(int32)
 	}
 	return params
 }
 func decodePatchSubmissionStatusParams(args [1]string, argsEscaped bool, r *http.Request) (params PatchSubmissionStatusParams, _ error) {
 	q := uri.NewQueryDecoder(r.URL.Query())
 	// Decode path: SubmissionID.
 	if err := func() error {
 		param := args[0]
 		if argsEscaped {
 			unescaped, err := url.PathUnescape(args[0])
 			if err != nil {
 				return errors.Wrap(err, "unescape path")
 			}
 			param = unescaped
 		}
 		if len(param) > 0 {
 			d := uri.NewPathDecoder(uri.PathDecoderConfig{
 				Param:   "SubmissionID",
 				Value:   param,
 				Style:   uri.PathStyleSimple,
 				Explode: false,
 			})
 			if err := func() error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				params.SubmissionID = c
 				return nil
 			}(); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "SubmissionID",
 			In:   "path",
 			Err:  err,
 		}
 	}
 	// Decode query: Status.
 	if err := func() error {
 		cfg := uri.QueryParameterDecodingConfig{
 			Name:    "Status",
 			Style:   uri.QueryStyleForm,
 			Explode: true,
 		}
 		if err := q.HasParam(cfg); err == nil {
 			if err := q.DecodeParam(cfg, func(d uri.Decoder) error {
 				val, err := d.DecodeValue()
 				if err != nil {
 					return err
 				}
 				c, err := conv.ToInt32(val)
 				if err != nil {
 					return err
 				}
 				params.Status = c
 				return nil
 			}); err != nil {
 				return err
 			}
 		} else {
 			return validate.ErrFieldRequired
 		}
 		return nil
 	}(); err != nil {
 		return params, &ogenerrors.DecodeParamError{
 			Name: "Status",
 			In:   "query",
 			Err:  err,
 		}
 	}
 	return params, nil
 }
--- a/api/oas_request_decoders_gen.go
+++ b/api/oas_request_decoders_gen.go
@ -1,3 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
--- a/api/oas_request_encoders_gen.go
+++ b/api/oas_request_encoders_gen.go
@ -1,3 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
--- a/api/oas_response_decoders_gen.go
+++ b/api/oas_response_decoders_gen.go
@ -1,434 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"io"
 	"mime"
 	"net/http"
 	"github.com/go-faster/errors"
 	"github.com/go-faster/jx"
 	"github.com/ogen-go/ogen/ogenerrors"
 	"github.com/ogen-go/ogen/validate"
 )
 func decodeCreateSubmissionResponse(resp *http.Response) (res *Submission, _ error) {
 	switch resp.StatusCode {
 	case 200:
 		// Code 200.
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Submission
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &response, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}
 	// Convenient error response.
 	defRes, err := func() (res *ErrorStatusCode, err error) {
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Error
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &ErrorStatusCode{
 				StatusCode: resp.StatusCode,
 				Response:   response,
 			}, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}()
 	if err != nil {
 		return res, errors.Wrapf(err, "default (code %d)", resp.StatusCode)
 	}
 	return res, errors.Wrap(defRes, "error")
 }
 func decodeGetSubmissionResponse(resp *http.Response) (res *Submission, _ error) {
 	switch resp.StatusCode {
 	case 200:
 		// Code 200.
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Submission
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &response, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}
 	// Convenient error response.
 	defRes, err := func() (res *ErrorStatusCode, err error) {
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Error
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &ErrorStatusCode{
 				StatusCode: resp.StatusCode,
 				Response:   response,
 			}, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}()
 	if err != nil {
 		return res, errors.Wrapf(err, "default (code %d)", resp.StatusCode)
 	}
 	return res, errors.Wrap(defRes, "error")
 }
 func decodeListSubmissionsResponse(resp *http.Response) (res []Submission, _ error) {
 	switch resp.StatusCode {
 	case 200:
 		// Code 200.
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response []Submission
 			if err := func() error {
 				response = make([]Submission, 0)
 				if err := d.Arr(func(d *jx.Decoder) error {
 					var elem Submission
 					if err := elem.Decode(d); err != nil {
 						return err
 					}
 					response = append(response, elem)
 					return nil
 				}); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			// Validate response.
 			if err := func() error {
 				if response == nil {
 					return errors.New("nil is invalid value")
 				}
 				return nil
 			}(); err != nil {
 				return res, errors.Wrap(err, "validate")
 			}
 			return response, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}
 	// Convenient error response.
 	defRes, err := func() (res *ErrorStatusCode, err error) {
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Error
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &ErrorStatusCode{
 				StatusCode: resp.StatusCode,
 				Response:   response,
 			}, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}()
 	if err != nil {
 		return res, errors.Wrapf(err, "default (code %d)", resp.StatusCode)
 	}
 	return res, errors.Wrap(defRes, "error")
 }
 func decodePatchSubmissionCompletedResponse(resp *http.Response) (res *PatchSubmissionCompletedOK, _ error) {
 	switch resp.StatusCode {
 	case 200:
 		// Code 200.
 		return &PatchSubmissionCompletedOK{}, nil
 	}
 	// Convenient error response.
 	defRes, err := func() (res *ErrorStatusCode, err error) {
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Error
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &ErrorStatusCode{
 				StatusCode: resp.StatusCode,
 				Response:   response,
 			}, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}()
 	if err != nil {
 		return res, errors.Wrapf(err, "default (code %d)", resp.StatusCode)
 	}
 	return res, errors.Wrap(defRes, "error")
 }
 func decodePatchSubmissionModelResponse(resp *http.Response) (res *PatchSubmissionModelOK, _ error) {
 	switch resp.StatusCode {
 	case 200:
 		// Code 200.
 		return &PatchSubmissionModelOK{}, nil
 	}
 	// Convenient error response.
 	defRes, err := func() (res *ErrorStatusCode, err error) {
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Error
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &ErrorStatusCode{
 				StatusCode: resp.StatusCode,
 				Response:   response,
 			}, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}()
 	if err != nil {
 		return res, errors.Wrapf(err, "default (code %d)", resp.StatusCode)
 	}
 	return res, errors.Wrap(defRes, "error")
 }
 func decodePatchSubmissionStatusResponse(resp *http.Response) (res *PatchSubmissionStatusOK, _ error) {
 	switch resp.StatusCode {
 	case 200:
 		// Code 200.
 		return &PatchSubmissionStatusOK{}, nil
 	}
 	// Convenient error response.
 	defRes, err := func() (res *ErrorStatusCode, err error) {
 		ct, _, err := mime.ParseMediaType(resp.Header.Get("Content-Type"))
 		if err != nil {
 			return res, errors.Wrap(err, "parse media type")
 		}
 		switch {
 		case ct == "application/json":
 			buf, err := io.ReadAll(resp.Body)
 			if err != nil {
 				return res, err
 			}
 			d := jx.DecodeBytes(buf)
 			var response Error
 			if err := func() error {
 				if err := response.Decode(d); err != nil {
 					return err
 				}
 				if err := d.Skip(); err != io.EOF {
 					return errors.New("unexpected trailing data")
 				}
 				return nil
 			}(); err != nil {
 				err = &ogenerrors.DecodeBodyError{
 					ContentType: ct,
 					Body:        buf,
 					Err:         err,
 				}
 				return res, err
 			}
 			return &ErrorStatusCode{
 				StatusCode: resp.StatusCode,
 				Response:   response,
 			}, nil
 		default:
 			return res, validate.InvalidContentType(ct)
 		}
 	}()
 	if err != nil {
 		return res, errors.Wrapf(err, "default (code %d)", resp.StatusCode)
 	}
 	return res, errors.Wrap(defRes, "error")
 }
--- a/api/oas_response_encoders_gen.go
+++ b/api/oas_response_encoders_gen.go
@ -1,108 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"net/http"
 	"github.com/go-faster/errors"
 	"github.com/go-faster/jx"
 	"go.opentelemetry.io/otel/codes"
 	"go.opentelemetry.io/otel/trace"
 	ht "github.com/ogen-go/ogen/http"
 )
 func encodeCreateSubmissionResponse(response *Submission, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeGetSubmissionResponse(response *Submission, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeListSubmissionsResponse(response []Submission, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	e.ArrStart()
 	for _, elem := range response {
 		elem.Encode(e)
 	}
 	e.ArrEnd()
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodePatchSubmissionCompletedResponse(response *PatchSubmissionCompletedOK, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	return nil
 }
 func encodePatchSubmissionModelResponse(response *PatchSubmissionModelOK, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	return nil
 }
 func encodePatchSubmissionStatusResponse(response *PatchSubmissionStatusOK, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	return nil
 }
 func encodeErrorResponse(response *ErrorStatusCode, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	code := response.StatusCode
 	if code == 0 {
 		// Set default status code.
 		code = http.StatusOK
 	}
 	w.WriteHeader(code)
 	if st := http.StatusText(code); code >= http.StatusBadRequest {
 		span.SetStatus(codes.Error, st)
 	} else {
 		span.SetStatus(codes.Ok, st)
 	}
 	e := new(jx.Encoder)
 	response.Response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	if code >= http.StatusInternalServerError {
 		return errors.Wrapf(ht.ErrInternalServerErrorResponse, "code: %d, message: %s", code, http.StatusText(code))
 	}
 	return nil
 }
--- a/api/oas_router_gen.go
+++ b/api/oas_router_gen.go
@ -1,435 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"net/http"
 	"net/url"
 	"strings"
 	"github.com/ogen-go/ogen/uri"
 )
 func (s *Server) cutPrefix(path string) (string, bool) {
 	prefix := s.cfg.Prefix
 	if prefix == "" {
 		return path, true
 	}
 	if !strings.HasPrefix(path, prefix) {
 		// Prefix doesn't match.
 		return "", false
 	}
 	// Cut prefix from the path.
 	return strings.TrimPrefix(path, prefix), true
 }
 // ServeHTTP serves http request as defined by OpenAPI v3 specification,
 // calling handler that matches the path or returning not found error.
 func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	elem := r.URL.Path
 	elemIsEscaped := false
 	if rawPath := r.URL.RawPath; rawPath != "" {
 		if normalized, ok := uri.NormalizeEscapedPath(rawPath); ok {
 			elem = normalized
 			elemIsEscaped = strings.ContainsRune(elem, '%')
 		}
 	}
 	elem, ok := s.cutPrefix(elem)
 	if !ok || len(elem) == 0 {
 		s.notFound(w, r)
 		return
 	}
 	args := [1]string{}
 	// Static code generated router with unwrapped path search.
 	switch {
 	default:
 		if len(elem) == 0 {
 			break
 		}
 		switch elem[0] {
 		case '/': // Prefix: "/submissions"
 			origElem := elem
 			if l := len("/submissions"); len(elem) >= l && elem[0:l] == "/submissions" {
 				elem = elem[l:]
 			} else {
 				break
 			}
 			if len(elem) == 0 {
 				switch r.Method {
 				case "GET":
 					s.handleListSubmissionsRequest([0]string{}, elemIsEscaped, w, r)
 				case "POST":
 					s.handleCreateSubmissionRequest([0]string{}, elemIsEscaped, w, r)
 				default:
 					s.notAllowed(w, r, "GET,POST")
 				}
 				return
 			}
 			switch elem[0] {
 			case '/': // Prefix: "/"
 				origElem := elem
 				if l := len("/"); len(elem) >= l && elem[0:l] == "/" {
 					elem = elem[l:]
 				} else {
 					break
 				}
 				// Param: "SubmissionID"
 				// Match until "/"
 				idx := strings.IndexByte(elem, '/')
 				if idx < 0 {
 					idx = len(elem)
 				}
 				args[0] = elem[:idx]
 				elem = elem[idx:]
 				if len(elem) == 0 {
 					switch r.Method {
 					case "GET":
 						s.handleGetSubmissionRequest([1]string{
 							args[0],
 						}, elemIsEscaped, w, r)
 					default:
 						s.notAllowed(w, r, "GET")
 					}
 					return
 				}
 				switch elem[0] {
 				case '/': // Prefix: "/"
 					origElem := elem
 					if l := len("/"); len(elem) >= l && elem[0:l] == "/" {
 						elem = elem[l:]
 					} else {
 						break
 					}
 					if len(elem) == 0 {
 						break
 					}
 					switch elem[0] {
 					case 'c': // Prefix: "completed"
 						origElem := elem
 						if l := len("completed"); len(elem) >= l && elem[0:l] == "completed" {
 							elem = elem[l:]
 						} else {
 							break
 						}
 						if len(elem) == 0 {
 							// Leaf node.
 							switch r.Method {
 							case "PATCH":
 								s.handlePatchSubmissionCompletedRequest([1]string{
 									args[0],
 								}, elemIsEscaped, w, r)
 							default:
 								s.notAllowed(w, r, "PATCH")
 							}
 							return
 						}
 						elem = origElem
 					case 'm': // Prefix: "model"
 						origElem := elem
 						if l := len("model"); len(elem) >= l && elem[0:l] == "model" {
 							elem = elem[l:]
 						} else {
 							break
 						}
 						if len(elem) == 0 {
 							// Leaf node.
 							switch r.Method {
 							case "PATCH":
 								s.handlePatchSubmissionModelRequest([1]string{
 									args[0],
 								}, elemIsEscaped, w, r)
 							default:
 								s.notAllowed(w, r, "PATCH")
 							}
 							return
 						}
 						elem = origElem
 					case 's': // Prefix: "status"
 						origElem := elem
 						if l := len("status"); len(elem) >= l && elem[0:l] == "status" {
 							elem = elem[l:]
 						} else {
 							break
 						}
 						if len(elem) == 0 {
 							// Leaf node.
 							switch r.Method {
 							case "PATCH":
 								s.handlePatchSubmissionStatusRequest([1]string{
 									args[0],
 								}, elemIsEscaped, w, r)
 							default:
 								s.notAllowed(w, r, "PATCH")
 							}
 							return
 						}
 						elem = origElem
 					}
 					elem = origElem
 				}
 				elem = origElem
 			}
 			elem = origElem
 		}
 	}
 	s.notFound(w, r)
 }
 // Route is route object.
 type Route struct {
 	name        string
 	summary     string
 	operationID string
 	pathPattern string
 	count       int
 	args        [1]string
 }
 // Name returns ogen operation name.
 //
 // It is guaranteed to be unique and not empty.
 func (r Route) Name() string {
 	return r.name
 }
 // Summary returns OpenAPI summary.
 func (r Route) Summary() string {
 	return r.summary
 }
 // OperationID returns OpenAPI operationId.
 func (r Route) OperationID() string {
 	return r.operationID
 }
 // PathPattern returns OpenAPI path.
 func (r Route) PathPattern() string {
 	return r.pathPattern
 }
 // Args returns parsed arguments.
 func (r Route) Args() []string {
 	return r.args[:r.count]
 }
 // FindRoute finds Route for given method and path.
 //
 // Note: this method does not unescape path or handle reserved characters in path properly. Use FindPath instead.
 func (s *Server) FindRoute(method, path string) (Route, bool) {
 	return s.FindPath(method, &url.URL{Path: path})
 }
 // FindPath finds Route for given method and URL.
 func (s *Server) FindPath(method string, u *url.URL) (r Route, _ bool) {
 	var (
 		elem = u.Path
 		args = r.args
 	)
 	if rawPath := u.RawPath; rawPath != "" {
 		if normalized, ok := uri.NormalizeEscapedPath(rawPath); ok {
 			elem = normalized
 		}
 		defer func() {
 			for i, arg := range r.args[:r.count] {
 				if unescaped, err := url.PathUnescape(arg); err == nil {
 					r.args[i] = unescaped
 				}
 			}
 		}()
 	}
 	elem, ok := s.cutPrefix(elem)
 	if !ok {
 		return r, false
 	}
 	// Static code generated router with unwrapped path search.
 	switch {
 	default:
 		if len(elem) == 0 {
 			break
 		}
 		switch elem[0] {
 		case '/': // Prefix: "/submissions"
 			origElem := elem
 			if l := len("/submissions"); len(elem) >= l && elem[0:l] == "/submissions" {
 				elem = elem[l:]
 			} else {
 				break
 			}
 			if len(elem) == 0 {
 				switch method {
 				case "GET":
 					r.name = "ListSubmissions"
 					r.summary = "Get list of submissions"
 					r.operationID = "listSubmissions"
 					r.pathPattern = "/submissions"
 					r.args = args
 					r.count = 0
 					return r, true
 				case "POST":
 					r.name = "CreateSubmission"
 					r.summary = "Create new submission"
 					r.operationID = "createSubmission"
 					r.pathPattern = "/submissions"
 					r.args = args
 					r.count = 0
 					return r, true
 				default:
 					return
 				}
 			}
 			switch elem[0] {
 			case '/': // Prefix: "/"
 				origElem := elem
 				if l := len("/"); len(elem) >= l && elem[0:l] == "/" {
 					elem = elem[l:]
 				} else {
 					break
 				}
 				// Param: "SubmissionID"
 				// Match until "/"
 				idx := strings.IndexByte(elem, '/')
 				if idx < 0 {
 					idx = len(elem)
 				}
 				args[0] = elem[:idx]
 				elem = elem[idx:]
 				if len(elem) == 0 {
 					switch method {
 					case "GET":
 						r.name = "GetSubmission"
 						r.summary = "Retrieve map with ID"
 						r.operationID = "getSubmission"
 						r.pathPattern = "/submissions/{SubmissionID}"
 						r.args = args
 						r.count = 1
 						return r, true
 					default:
 						return
 					}
 				}
 				switch elem[0] {
 				case '/': // Prefix: "/"
 					origElem := elem
 					if l := len("/"); len(elem) >= l && elem[0:l] == "/" {
 						elem = elem[l:]
 					} else {
 						break
 					}
 					if len(elem) == 0 {
 						break
 					}
 					switch elem[0] {
 					case 'c': // Prefix: "completed"
 						origElem := elem
 						if l := len("completed"); len(elem) >= l && elem[0:l] == "completed" {
 							elem = elem[l:]
 						} else {
 							break
 						}
 						if len(elem) == 0 {
 							// Leaf node.
 							switch method {
 							case "PATCH":
 								r.name = "PatchSubmissionCompleted"
 								r.summary = "Retrieve map with ID"
 								r.operationID = "patchSubmissionCompleted"
 								r.pathPattern = "/submissions/{SubmissionID}/completed"
 								r.args = args
 								r.count = 1
 								return r, true
 							default:
 								return
 							}
 						}
 						elem = origElem
 					case 'm': // Prefix: "model"
 						origElem := elem
 						if l := len("model"); len(elem) >= l && elem[0:l] == "model" {
 							elem = elem[l:]
 						} else {
 							break
 						}
 						if len(elem) == 0 {
 							// Leaf node.
 							switch method {
 							case "PATCH":
 								r.name = "PatchSubmissionModel"
 								r.summary = "Update model following role restrictions"
 								r.operationID = "patchSubmissionModel"
 								r.pathPattern = "/submissions/{SubmissionID}/model"
 								r.args = args
 								r.count = 1
 								return r, true
 							default:
 								return
 							}
 						}
 						elem = origElem
 					case 's': // Prefix: "status"
 						origElem := elem
 						if l := len("status"); len(elem) >= l && elem[0:l] == "status" {
 							elem = elem[l:]
 						} else {
 							break
 						}
 						if len(elem) == 0 {
 							// Leaf node.
 							switch method {
 							case "PATCH":
 								r.name = "PatchSubmissionStatus"
 								r.summary = "Update status following role restrictions"
 								r.operationID = "patchSubmissionStatus"
 								r.pathPattern = "/submissions/{SubmissionID}/status"
 								r.args = args
 								r.count = 1
 								return r, true
 							default:
 								return
 							}
 						}
 						elem = origElem
 					}
 					elem = origElem
 				}
 				elem = origElem
 			}
 			elem = origElem
 		}
 	}
 	return r, false
 }
--- a/api/oas_schemas_gen.go
+++ b/api/oas_schemas_gen.go
@ -1,401 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"fmt"
 )
 func (s *ErrorStatusCode) Error() string {
 	return fmt.Sprintf("code %d: %+v", s.StatusCode, s.Response)
 }
 // Represents error object.
 // Ref: #/components/schemas/Error
 type Error struct {
 	Code    int64  `json:"code"`
 	Message string `json:"message"`
 }
 // GetCode returns the value of Code.
 func (s *Error) GetCode() int64 {
 	return s.Code
 }
 // GetMessage returns the value of Message.
 func (s *Error) GetMessage() string {
 	return s.Message
 }
 // SetCode sets the value of Code.
 func (s *Error) SetCode(val int64) {
 	s.Code = val
 }
 // SetMessage sets the value of Message.
 func (s *Error) SetMessage(val string) {
 	s.Message = val
 }
 // ErrorStatusCode wraps Error with StatusCode.
 type ErrorStatusCode struct {
 	StatusCode int
 	Response   Error
 }
 // GetStatusCode returns the value of StatusCode.
 func (s *ErrorStatusCode) GetStatusCode() int {
 	return s.StatusCode
 }
 // GetResponse returns the value of Response.
 func (s *ErrorStatusCode) GetResponse() Error {
 	return s.Response
 }
 // SetStatusCode sets the value of StatusCode.
 func (s *ErrorStatusCode) SetStatusCode(val int) {
 	s.StatusCode = val
 }
 // SetResponse sets the value of Response.
 func (s *ErrorStatusCode) SetResponse(val Error) {
 	s.Response = val
 }
 // NewOptInt32 returns new OptInt32 with value set to v.
 func NewOptInt32(v int32) OptInt32 {
 	return OptInt32{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptInt32 is optional int32.
 type OptInt32 struct {
 	Value int32
 	Set   bool
 }
 // IsSet returns true if OptInt32 was set.
 func (o OptInt32) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptInt32) Reset() {
 	var v int32
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptInt32) SetTo(v int32) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptInt32) Get() (v int32, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptInt32) Or(d int32) int32 {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // NewOptInt64 returns new OptInt64 with value set to v.
 func NewOptInt64(v int64) OptInt64 {
 	return OptInt64{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptInt64 is optional int64.
 type OptInt64 struct {
 	Value int64
 	Set   bool
 }
 // IsSet returns true if OptInt64 was set.
 func (o OptInt64) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptInt64) Reset() {
 	var v int64
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptInt64) SetTo(v int64) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptInt64) Get() (v int64, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptInt64) Or(d int64) int64 {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // NewOptString returns new OptString with value set to v.
 func NewOptString(v string) OptString {
 	return OptString{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptString is optional string.
 type OptString struct {
 	Value string
 	Set   bool
 }
 // IsSet returns true if OptString was set.
 func (o OptString) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptString) Reset() {
 	var v string
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptString) SetTo(v string) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptString) Get() (v string, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptString) Or(d string) string {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // NewOptSubmissionFilter returns new OptSubmissionFilter with value set to v.
 func NewOptSubmissionFilter(v SubmissionFilter) OptSubmissionFilter {
 	return OptSubmissionFilter{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptSubmissionFilter is optional SubmissionFilter.
 type OptSubmissionFilter struct {
 	Value SubmissionFilter
 	Set   bool
 }
 // IsSet returns true if OptSubmissionFilter was set.
 func (o OptSubmissionFilter) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptSubmissionFilter) Reset() {
 	var v SubmissionFilter
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptSubmissionFilter) SetTo(v SubmissionFilter) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptSubmissionFilter) Get() (v SubmissionFilter, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptSubmissionFilter) Or(d SubmissionFilter) SubmissionFilter {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // Ref: #/components/schemas/Pagination
 type Pagination struct {
 	Page  int32 `json:"Page"`
 	Limit int32 `json:"Limit"`
 }
 // GetPage returns the value of Page.
 func (s *Pagination) GetPage() int32 {
 	return s.Page
 }
 // GetLimit returns the value of Limit.
 func (s *Pagination) GetLimit() int32 {
 	return s.Limit
 }
 // SetPage sets the value of Page.
 func (s *Pagination) SetPage(val int32) {
 	s.Page = val
 }
 // SetLimit sets the value of Limit.
 func (s *Pagination) SetLimit(val int32) {
 	s.Limit = val
 }
 // PatchSubmissionCompletedOK is response for PatchSubmissionCompleted operation.
 type PatchSubmissionCompletedOK struct{}
 // PatchSubmissionModelOK is response for PatchSubmissionModel operation.
 type PatchSubmissionModelOK struct{}
 // PatchSubmissionStatusOK is response for PatchSubmissionStatus operation.
 type PatchSubmissionStatusOK struct{}
 // Ref: #/components/schemas/Submission
 type Submission struct {
 	ID          OptInt64  `json:"ID"`
 	DisplayName OptString `json:"DisplayName"`
 	Creator     OptString `json:"Creator"`
 	GameID      OptInt32  `json:"GameID"`
 	Date        OptInt64  `json:"Date"`
 }
 // GetID returns the value of ID.
 func (s *Submission) GetID() OptInt64 {
 	return s.ID
 }
 // GetDisplayName returns the value of DisplayName.
 func (s *Submission) GetDisplayName() OptString {
 	return s.DisplayName
 }
 // GetCreator returns the value of Creator.
 func (s *Submission) GetCreator() OptString {
 	return s.Creator
 }
 // GetGameID returns the value of GameID.
 func (s *Submission) GetGameID() OptInt32 {
 	return s.GameID
 }
 // GetDate returns the value of Date.
 func (s *Submission) GetDate() OptInt64 {
 	return s.Date
 }
 // SetID sets the value of ID.
 func (s *Submission) SetID(val OptInt64) {
 	s.ID = val
 }
 // SetDisplayName sets the value of DisplayName.
 func (s *Submission) SetDisplayName(val OptString) {
 	s.DisplayName = val
 }
 // SetCreator sets the value of Creator.
 func (s *Submission) SetCreator(val OptString) {
 	s.Creator = val
 }
 // SetGameID sets the value of GameID.
 func (s *Submission) SetGameID(val OptInt32) {
 	s.GameID = val
 }
 // SetDate sets the value of Date.
 func (s *Submission) SetDate(val OptInt64) {
 	s.Date = val
 }
 // Ref: #/components/schemas/SubmissionFilter
 type SubmissionFilter struct {
 	ID          OptInt64  `json:"ID"`
 	DisplayName OptString `json:"DisplayName"`
 	Creator     OptString `json:"Creator"`
 	GameID      OptInt32  `json:"GameID"`
 	Date        OptInt64  `json:"Date"`
 }
 // GetID returns the value of ID.
 func (s *SubmissionFilter) GetID() OptInt64 {
 	return s.ID
 }
 // GetDisplayName returns the value of DisplayName.
 func (s *SubmissionFilter) GetDisplayName() OptString {
 	return s.DisplayName
 }
 // GetCreator returns the value of Creator.
 func (s *SubmissionFilter) GetCreator() OptString {
 	return s.Creator
 }
 // GetGameID returns the value of GameID.
 func (s *SubmissionFilter) GetGameID() OptInt32 {
 	return s.GameID
 }
 // GetDate returns the value of Date.
 func (s *SubmissionFilter) GetDate() OptInt64 {
 	return s.Date
 }
 // SetID sets the value of ID.
 func (s *SubmissionFilter) SetID(val OptInt64) {
 	s.ID = val
 }
 // SetDisplayName sets the value of DisplayName.
 func (s *SubmissionFilter) SetDisplayName(val OptString) {
 	s.DisplayName = val
 }
 // SetCreator sets the value of Creator.
 func (s *SubmissionFilter) SetCreator(val OptString) {
 	s.Creator = val
 }
 // SetGameID sets the value of GameID.
 func (s *SubmissionFilter) SetGameID(val OptInt32) {
 	s.GameID = val
 }
 // SetDate sets the value of Date.
 func (s *SubmissionFilter) SetDate(val OptInt64) {
 	s.Date = val
 }
--- a/api/oas_server_gen.go
+++ b/api/oas_server_gen.go
@ -1,70 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 )
 // Handler handles operations described by OpenAPI v3 specification.
 type Handler interface {
 	// CreateSubmission implements createSubmission operation.
 	//
 	// Create new submission.
 	//
 	// POST /submissions
 	CreateSubmission(ctx context.Context) (*Submission, error)
 	// GetSubmission implements getSubmission operation.
 	//
 	// Retrieve map with ID.
 	//
 	// GET /submissions/{SubmissionID}
 	GetSubmission(ctx context.Context, params GetSubmissionParams) (*Submission, error)
 	// ListSubmissions implements listSubmissions operation.
 	//
 	// Get list of submissions.
 	//
 	// GET /submissions
 	ListSubmissions(ctx context.Context, params ListSubmissionsParams) ([]Submission, error)
 	// PatchSubmissionCompleted implements patchSubmissionCompleted operation.
 	//
 	// Retrieve map with ID.
 	//
 	// PATCH /submissions/{SubmissionID}/completed
 	PatchSubmissionCompleted(ctx context.Context, params PatchSubmissionCompletedParams) error
 	// PatchSubmissionModel implements patchSubmissionModel operation.
 	//
 	// Update model following role restrictions.
 	//
 	// PATCH /submissions/{SubmissionID}/model
 	PatchSubmissionModel(ctx context.Context, params PatchSubmissionModelParams) error
 	// PatchSubmissionStatus implements patchSubmissionStatus operation.
 	//
 	// Update status following role restrictions.
 	//
 	// PATCH /submissions/{SubmissionID}/status
 	PatchSubmissionStatus(ctx context.Context, params PatchSubmissionStatusParams) error
 	// NewError creates *ErrorStatusCode from error returned by handler.
 	//
 	// Used for common default response.
 	NewError(ctx context.Context, err error) *ErrorStatusCode
 }
 // Server implements http server based on OpenAPI v3 specification and
 // calls Handler to handle requests.
 type Server struct {
 	h Handler
 	baseServer
 }
 // NewServer creates new Server.
 func NewServer(h Handler, opts ...ServerOption) (*Server, error) {
 	s, err := newServerConfig(opts...).baseServer()
 	if err != nil {
 		return nil, err
 	}
 	return &Server{
 		h:          h,
 		baseServer: s,
 	}, nil
 }
--- a/api/oas_unimplemented_gen.go
+++ b/api/oas_unimplemented_gen.go
@ -1,76 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 	ht "github.com/ogen-go/ogen/http"
 )
 // UnimplementedHandler is no-op Handler which returns http.ErrNotImplemented.
 type UnimplementedHandler struct{}
 var _ Handler = UnimplementedHandler{}
 // CreateSubmission implements createSubmission operation.
 //
 // Create new submission.
 //
 // POST /submissions
 func (UnimplementedHandler) CreateSubmission(ctx context.Context) (r *Submission, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // GetSubmission implements getSubmission operation.
 //
 // Retrieve map with ID.
 //
 // GET /submissions/{SubmissionID}
 func (UnimplementedHandler) GetSubmission(ctx context.Context, params GetSubmissionParams) (r *Submission, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // ListSubmissions implements listSubmissions operation.
 //
 // Get list of submissions.
 //
 // GET /submissions
 func (UnimplementedHandler) ListSubmissions(ctx context.Context, params ListSubmissionsParams) (r []Submission, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // PatchSubmissionCompleted implements patchSubmissionCompleted operation.
 //
 // Retrieve map with ID.
 //
 // PATCH /submissions/{SubmissionID}/completed
 func (UnimplementedHandler) PatchSubmissionCompleted(ctx context.Context, params PatchSubmissionCompletedParams) error {
 	return ht.ErrNotImplemented
 }
 // PatchSubmissionModel implements patchSubmissionModel operation.
 //
 // Update model following role restrictions.
 //
 // PATCH /submissions/{SubmissionID}/model
 func (UnimplementedHandler) PatchSubmissionModel(ctx context.Context, params PatchSubmissionModelParams) error {
 	return ht.ErrNotImplemented
 }
 // PatchSubmissionStatus implements patchSubmissionStatus operation.
 //
 // Update status following role restrictions.
 //
 // PATCH /submissions/{SubmissionID}/status
 func (UnimplementedHandler) PatchSubmissionStatus(ctx context.Context, params PatchSubmissionStatusParams) error {
 	return ht.ErrNotImplemented
 }
 // NewError creates *ErrorStatusCode from error returned by handler.
 //
 // Used for common default response.
 func (UnimplementedHandler) NewError(ctx context.Context, err error) (r *ErrorStatusCode) {
 	r = new(ErrorStatusCode)
 	return r
 }
--- a/api/oas_validators_gen.go
+++ b/api/oas_validators_gen.go
@ -1,61 +0,0 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"github.com/go-faster/errors"
 	"github.com/ogen-go/ogen/validate"
 )
 func (s *Pagination) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.Int{
 			MinSet:        true,
 			Min:           1,
 			MaxSet:        false,
 			Max:           0,
 			MinExclusive:  false,
 			MaxExclusive:  false,
 			MultipleOfSet: false,
 			MultipleOf:    0,
 		}).Validate(int64(s.Page)); err != nil {
 			return errors.Wrap(err, "int")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Page",
 			Error: err,
 		})
 	}
 	if err := func() error {
 		if err := (validate.Int{
 			MinSet:        true,
 			Min:           1,
 			MaxSet:        true,
 			Max:           100,
 			MinExclusive:  false,
 			MaxExclusive:  false,
 			MultipleOfSet: false,
 			MultipleOf:    0,
 		}).Validate(int64(s.Limit)); err != nil {
 			return errors.Wrap(err, "int")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Limit",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
--- a/cmd/maps-service/service.go
+++ b/cmd/maps-service/service.go
@ -0,0 +1,23 @@
 package main
 import (
 	"git.itzana.me/strafesnet/maps-service/pkg/cmds"
 	log "github.com/sirupsen/logrus"
 	"github.com/urfave/cli/v2"
 	"os"
 )
 func main() {
 	log.SetLevel(log.InfoLevel)
 	log.SetFormatter(&log.JSONFormatter{})
 	log.SetReportCaller(true)
 	app := cmds.NewApp()
 	app.Commands = []*cli.Command{
 		cmds.NewServeCommand(),
 	}
 	if err := app.Run(os.Args); err != nil {
 		log.WithError(err).Fatal("Failed to run app")
 	}
 }
--- a/compose.yaml
+++ b/compose.yaml
@ -0,0 +1,119 @@
 version: '3.9'
 networks:
  maps-service-network:
    driver: bridge
 services:
  nats:
    image: docker.io/nats:latest
    container_name: nats
    command: ["-js"] #"-DVV"
    networks:
      - maps-service-network
  mapsservice:
    image:
      maps-service
    container_name: mapsservice
    command: [
      # debug
      "--debug","serve",
      # http service port
      "--port","8082",
      # postgres
      "--pg-host","10.0.0.29",
      "--pg-port","5432",
      "--pg-db","maps",
      "--pg-user","quat",
      "--pg-password","happypostgresuser",
      # other hosts
      "--nats-host","nats:4222",
      "--auth-rpc-host","authrpc:8081"
    ]
    depends_on:
      - authrpc
      - nats
    networks:
      - maps-service-network
    ports:
      - "8082:8082"
  web:
    image:
      maps-service-web
    networks:
      - maps-service-network
    ports:
      - "3000:3000"
  validation:
    image:
      maps-service-validation
    container_name: validation
    environment:
      - RBXCOOKIE
      - API_HOST=http://mapsservice:8082
      - NATS_HOST=nats:4222
      - DATA_HOST=http://dataservice:9000
    depends_on:
      - nats
      # note: this races the mapsservice which creates a nats stream
      # the validation will panic if the nats stream is not created
      - mapsservice
      - dataservice
    networks:
      - maps-service-network
  dataservice:
    image: registry.itzana.me/strafesnet/data-service:master
    container_name: dataservice
    environment:
      - DEBUG=true
      - PG_HOST=10.0.0.29
      - PG_PORT=5432
      - PG_USER=quat
      - PG_DB=data
      - PG_PASS=happypostgresuser
    networks:
      - maps-service-network
  authredis:
    image: docker.io/redis:latest
    container_name: authredis
    volumes:
      - redis-data:/data
    command: ["redis-server", "--appendonly", "yes"]
    networks:
      - maps-service-network
  authrpc:
    image: registry.itzana.me/strafesnet/auth-service:master
    container_name: authrpc
    command: ["serve", "rpc"]
    environment:
      - REDIS_ADDR=authredis:6379
    env_file:
      - ../auth-compose/auth-service.env
    depends_on:
      - authredis
    networks:
      - maps-service-network
    logging:
      driver: "none"
  auth-web:
    image: registry.itzana.me/strafesnet/auth-service:master
    command: ["serve", "web"]
    environment:
      - REDIS_ADDR=authredis:6379
    env_file:
      - ../auth-compose/auth-service.env
    depends_on:
      - authredis
    networks:
      - maps-service-network
    ports:
      - "8080:8080"
 volumes:
  redis-data:
--- a/docs/submission-workflow.md
+++ b/docs/submission-workflow.md
--- a/generate.go
+++ b/generate.go
@ -1,3 +1,3 @@
 package main
-//go:generate go run github.com/ogen-go/ogen/cmd/ogen@latest --target api --clean openapi.yaml
+//go:generate go run github.com/ogen-go/ogen/cmd/ogen@latest --target pkg/api --clean openapi.yaml
--- a/go.mod
+++ b/go.mod
@ -5,17 +5,41 @@ go 1.22
 toolchain go1.23.3
 require (
-	git.itzana.me/strafesnet/go-grpc v0.0.0-20240302215338-8ebbc7cffb0a
+	git.itzana.me/strafesnet/go-grpc v0.0.0-20241129081229-9e166b3d11f7
 	git.itzana.me/strafesnet/utils v0.0.0-20220716194944-d8ca164052f9
 	github.com/dchest/siphash v1.2.3
 	github.com/go-faster/errors v0.7.1
 	github.com/go-faster/jx v1.1.0
 	github.com/nats-io/nats.go v1.37.0
 	github.com/ogen-go/ogen v1.2.1
 	github.com/sirupsen/logrus v1.9.3
 	github.com/urfave/cli/v2 v2.27.5
 	go.opentelemetry.io/otel v1.32.0
 	go.opentelemetry.io/otel/metric v1.32.0
 	go.opentelemetry.io/otel/trace v1.32.0
-	google.golang.org/grpc v1.64.0
+	google.golang.org/grpc v1.48.0
 	gorm.io/driver/postgres v1.5.10
 	gorm.io/gorm v1.25.10
 )
-require google.golang.org/genproto/googleapis/rpc v0.0.0-20240528184218-531527333157 // indirect
+require (
 	github.com/cpuguy83/go-md2man/v2 v2.0.5 // indirect
 	github.com/golang/protobuf v1.5.2 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
 	github.com/jackc/pgx/v5 v5.5.5 // indirect
 	github.com/jackc/puddle/v2 v2.2.1 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
 	github.com/klauspost/compress v1.17.6 // indirect
 	github.com/nats-io/nkeys v0.4.7 // indirect
 	github.com/nats-io/nuid v1.0.1 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
 	golang.org/x/crypto v0.23.0 // indirect
 	google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013 // indirect
 	google.golang.org/protobuf v1.28.0 // indirect
 )
 require (
 	github.com/dlclark/regexp2 v1.11.0 // indirect
@ -29,14 +53,12 @@ require (
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/segmentio/asm v1.2.0 // indirect
-	go.uber.org/multierr v1.11.0 // indirect
+	go.uber.org/multierr v1.11.0
 	go.uber.org/zap v1.27.0 // indirect
 	golang.org/x/exp v0.0.0-20240531132922-fd00a4e0eefc // indirect
 	golang.org/x/net v0.25.0 // indirect
 	golang.org/x/sync v0.7.0 // indirect
 	golang.org/x/sys v0.20.0 // indirect
 	golang.org/x/text v0.15.0 // indirect
 	//  google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013 // indirect
 	google.golang.org/protobuf v1.34.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 )
--- a/go.sum
+++ b/go.sum
@ -1,9 +1,35 @@
-git.itzana.me/strafesnet/go-grpc v0.0.0-20240302215338-8ebbc7cffb0a h1:679jxkSaW3ZEj0XW6v+sr3Wr3LcmHRbbDLmo80xty5s=
+cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
-git.itzana.me/strafesnet/go-grpc v0.0.0-20240302215338-8ebbc7cffb0a/go.mod h1:X7XTRUScRkBWq8q8bplbeso105RPDlnY7J6Wy1IwBMs=
+cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
 git.itzana.me/strafesnet/go-grpc v0.0.0-20241129081229-9e166b3d11f7 h1:5XzWd3ZZjSw1M60IfHuILty2vRPBYiqM0FZ+E7uHCi8=
 git.itzana.me/strafesnet/go-grpc v0.0.0-20241129081229-9e166b3d11f7/go.mod h1:X7XTRUScRkBWq8q8bplbeso105RPDlnY7J6Wy1IwBMs=
 git.itzana.me/strafesnet/utils v0.0.0-20220716194944-d8ca164052f9 h1:7lU6jyR7S7Rhh1dnUp7GyIRHUTBXZagw8F4n4hOyxLw=
 git.itzana.me/strafesnet/utils v0.0.0-20220716194944-d8ca164052f9/go.mod h1:uyYerSieEt4v0MJCdPLppG0LtJ4Yj035vuTetWGsxjY=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
 github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4/go.mod h1:6pvJx4me5XPnfI9Z40ddWsdw2W/uZgQLFXToKeRcDiI=
 github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20211001041855-01bcc9b48dfe/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
 github.com/cpuguy83/go-md2man/v2 v2.0.5 h1:ZtcqGrnekaHpVLArFSe4HK5DoKx1T0rq2DwVB0alcyc=
 github.com/cpuguy83/go-md2man/v2 v2.0.5/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dchest/siphash v1.2.3 h1:QXwFc8cFOR2dSa/gE6o/HokBMWtLUaNDVd+22aKHeEA=
 github.com/dchest/siphash v1.2.3/go.mod h1:0NvQU092bT0ipiFN++/rXm69QG9tVxLAlQHIXMPAkHc=
 github.com/dlclark/regexp2 v1.11.0 h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI=
 github.com/dlclark/regexp2 v1.11.0/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
 github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
 github.com/envoyproxy/go-control-plane v0.10.2-0.20220325020618-49ff273808a1/go.mod h1:KJwIaB5Mv44NWtYuAOFCVOjcI94vtpEz2JU/D2v6IjE=
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
 github.com/fatih/color v1.17.0 h1:GlRw1BRJxkpqUCBKzKOw098ed57fEsKeNjpTe3cSjK4=
 github.com/fatih/color v1.17.0/go.mod h1:YZ7TlrGPkiz6ku9fK3TLD/pl3CpsiFyu8N92HLgmosI=
 github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk=
@ -19,10 +45,51 @@ github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
 github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
 github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
 github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
 github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
 github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
 github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
 github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8=
 github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
 github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
 github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
 github.com/golang/protobuf v1.5.2 h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw=
 github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
 github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk=
 github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
 github.com/jackc/pgx/v5 v5.5.5 h1:amBjrZVmksIdNjxGW/IiIMzxMKZFelXbUoPNb+8sjQw=
 github.com/jackc/pgx/v5 v5.5.5/go.mod h1:ez9gk+OAat140fv9ErkZDYFWmXLfV+++K0uAOiwgm1A=
 github.com/jackc/puddle/v2 v2.2.1 h1:RhxXJtFG022u4ibrCSMSiu5aOq1i77R3OHKNJj77OAk=
 github.com/jackc/puddle/v2 v2.2.1/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=
 github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD/E=
 github.com/jinzhu/inflection v1.0.0/go.mod h1:h+uFLlag+Qp1Va5pdKtLDYj+kHp5pxUVkryuEj+Srlc=
 github.com/jinzhu/now v1.1.2/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8=
 github.com/jinzhu/now v1.1.5 h1:/o9tlHleP7gOFmsnYNz3RGnqzefHA47wQpKrrdTIwXQ=
 github.com/jinzhu/now v1.1.5/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8=
 github.com/klauspost/compress v1.17.6 h1:60eq2E/jlfwQXtvZEeBUYADs+BwKBWURIY+Gj2eRGjI=
 github.com/klauspost/compress v1.17.6/go.mod h1:/dCuZOvVtNoHsyb+cuJD3itjs3NbnF6KH9zAO4BDxPM=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
@ -32,50 +99,145 @@ github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovk
 github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
 github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/nats-io/nats.go v1.37.0 h1:07rauXbVnnJvv1gfIyghFEo6lUcYRY0WXc3x7x0vUxE=
 github.com/nats-io/nats.go v1.37.0/go.mod h1:Ubdu4Nh9exXdSz0RVWRFBbRfrbSxOYd26oF0wkWclB8=
 github.com/nats-io/nkeys v0.4.7 h1:RwNJbbIdYCoClSDNY7QVKZlyb/wfT6ugvFCiKy6vDvI=
 github.com/nats-io/nkeys v0.4.7/go.mod h1:kqXRgRDPlGy7nGaEDMuYzmiJCIAAWDK0IMBtDmGD0nc=
 github.com/nats-io/nuid v1.0.1 h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=
 github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c=
 github.com/ogen-go/ogen v1.2.1 h1:C5A0lvUMu2wl+eWIxnpXMWnuOJ26a2FyzR1CIC2qG0M=
 github.com/ogen-go/ogen v1.2.1/go.mod h1:P2zQdEu8UqaVRfD5GEFvl+9q63VjMLvDquq1wVbyInM=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
 github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/segmentio/asm v1.2.0 h1:9BQrFxC+YOHJlTlHGkTrFWf59nbL3XnCoFLTwDCI7ys=
 github.com/segmentio/asm v1.2.0/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr5aAcs=
 github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
 github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/urfave/cli/v2 v2.27.5 h1:WoHEJLdsXr6dDWoJgMq/CboDmyY/8HMMH1fTECbih+w=
 github.com/urfave/cli/v2 v2.27.5/go.mod h1:3Sevf16NykTbInEnD0yKkjDAeZDS0A6bzhBH5hrMvTQ=
 github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 h1:gEOO8jv9F4OT7lGCjxCBTO/36wtF6j2nSip77qHd4x4=
 github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1/go.mod h1:Ohn+xnUBiLI6FVj/9LpzZWtj1/D6lUovWYBkxHVV3aM=
 go.opentelemetry.io/otel v1.32.0 h1:WnBN+Xjcteh0zdk01SVqV55d/m62NJLJdIyb4y/WO5U=
 go.opentelemetry.io/otel v1.32.0/go.mod h1:00DCVSB0RQcnzlwyTfqtxSm+DRr9hpYrHjNGiBHVQIg=
 go.opentelemetry.io/otel/metric v1.32.0 h1:xV2umtmNcThh2/a/aCP+h64Xx5wsj8qqnkYZktzNa0M=
 go.opentelemetry.io/otel/metric v1.32.0/go.mod h1:jH7CIbbK6SH2V2wE16W05BHCtIDzauciCRLoc/SyMv8=
 go.opentelemetry.io/otel/trace v1.32.0 h1:WIC9mYrXf8TmY/EXuULKc8hR17vE+Hjv2cssQDe03fM=
 go.opentelemetry.io/otel/trace v1.32.0/go.mod h1:+i4rkvCraA+tG6AzwloGaCtkx53Fa+L+V8e9a7YvhT8=
 go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
 go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
 go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.23.0 h1:dIJU/v2J8Mdglj/8rJ6UUOM3Zc9zLZxVZwwxMooUSAI=
 golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20240531132922-fd00a4e0eefc h1:O9NuF4s+E/PvMIy+9IUZB9znFwUIXEWSstNjek6VpVg=
 golang.org/x/exp v0.0.0-20240531132922-fd00a4e0eefc/go.mod h1:XtvwrStGgqGPLc4cjQfWqZHG1YFdYs6swckp8vpsjnc=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
 golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.25.0 h1:d/OCCoBEUq33pjydKrGQhw7IlUPI2Oylr+8qLx49kac=
 golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M=
 golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.20.0 h1:Od9JTbYCk261bKm4M/mw7AklTlFYIa0bIp9BgSm1S8Y=
 golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.15.0 h1:h1V/4gjBv8v9cjcR6+AR5+/cIYK5N/WAgiv4xlsEtAk=
 golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20240528184218-531527333157 h1:Zy9XzmMEflZ/MAaA7vNcoebnRAld7FsPW1EeBB7V0m8=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20240528184218-531527333157/go.mod h1:EfXuqaE1J41VCDicxHzUDm+8rk+7ZdXzHV0IhO/I6s0=
+golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-google.golang.org/grpc v1.64.0 h1:KH3VH9y/MgNQg1dE7b3XfVK0GsPSIzJwdF617gUSbvY=
+golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
-google.golang.org/grpc v1.64.0/go.mod h1:oxjF8E3FBnjp+/gVFYdWacaLDx9na1aqy9oovLpxQYg=
+golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
-google.golang.org/protobuf v1.34.1 h1:9ddQBjfCyZPOHPUiPxpYESBLc+T8P3E+Vo4IbKZgFWg=
+golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
-google.golang.org/protobuf v1.34.1/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
 google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
 google.golang.org/genproto v0.0.0-20200513103714-09dca8ec2884/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
 google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013 h1:+kGHl1aib/qcwaRi1CbqBZ1rk19r85MNUf8HaBghugY=
 google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
 google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
 google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
 google.golang.org/grpc v1.33.1/go.mod h1:fr5YgcSWrqhRRxogOsw7RzIpsmvOZ6IcH4kBYTpR3n0=
 google.golang.org/grpc v1.36.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
 google.golang.org/grpc v1.48.0 h1:rQOsyJ/8+ufEDJd/Gdsz7HG220Mh9HAhFHRGnIjda0w=
 google.golang.org/grpc v1.48.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
 google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
 google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
 google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
 google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
 google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
 google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
 google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
 google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
 google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
 google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
 google.golang.org/protobuf v1.28.0 h1:w43yiav+6bVFTBQFZX0r7ipe9JQ1QsbMgHwbBziscLw=
 google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gorm.io/driver/postgres v1.5.10 h1:7Lggqempgy496c0WfHXsYWxk3Th+ZcW66/21QhVFdeE=
 gorm.io/driver/postgres v1.5.10/go.mod h1:DX3GReXH+3FPWGrrgffdvCk3DQ1dwDPdmbenSkweRGI=
 gorm.io/gorm v1.21.11/go.mod h1:F+OptMscr0P2F2qU97WT1WimdH9GaQPoDW7AYd5i2Y0=
 gorm.io/gorm v1.25.10 h1:dQpO+33KalOA+aFYGlK+EfxcI5MbO7EP2yYygwh9h+s=
 gorm.io/gorm v1.25.10/go.mod h1:hbnx/Oo0ChWMn1BIhpy1oYozzpM15i4YPuHDmfYtwg8=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
--- a/internal/controller/submissions.go
+++ b/internal/controller/submissions.go
@ -1,130 +0,0 @@
 package controller
 import (
 	"context"
 	"fmt"
 	"git.itzana.me/strafesnet/maps-service/internal/datastore"
 	"git.itzana.me/strafesnet/maps-service/internal/model"
 	"git.itzana.me/strafesnet/maps-service/api"
 	"github.com/pkg/errors"
 	"time"
 )
 type Maps struct {
 	*maps.UnimplementedMapsServiceServer
 	Store datastore.Datastore
 }
 func (m Maps) Get(ctx context.Context, params *api.GetSubmissionParams) (*api.Submission, error) {
 	item, err := m.Store.Maps().Get(ctx, params.SubmissionID)
 	if err != nil {
 		if err == datastore.ErrNotExist {
 			return nil, status.Error(codes.NotFound, "map does not exit")
 		}
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to get map:").Error())
 	}
 	return &maps.MapResponse{
 		ID:          item.ID,
 		DisplayName: item.DisplayName,
 		Creator:     item.Creator,
 		GameID:      item.GameID,
 		Date:        item.Date.Unix(),
 	}, nil
 }
 func (m Maps) GetList(ctx context.Context, list *maps.IdList) (*maps.MapList, error) {
 	items, err := m.Store.Maps().GetList(ctx, list.ID)
 	if err != nil {
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to get maps").Error())
 	}
 	var resp maps.MapList
 	for i := 0; i < len(items); i++ {
 		resp.Maps = append(resp.Maps, &maps.MapResponse{
 			ID:          items[i].ID,
 			DisplayName: items[i].DisplayName,
 			Creator:     items[i].Creator,
 			GameID:      items[i].GameID,
 			Date:        items[i].Date.Unix(),
 		})
 	}
 	return &resp, nil
 }
 func (m Maps) Update(ctx context.Context, request *maps.MapRequest) (*maps.NullResponse, error) {
 	updates := datastore.Optional()
 	updates.AddNotNil("display_name", request.DisplayName)
 	updates.AddNotNil("creator", request.Creator)
 	updates.AddNotNil("game_id", request.GameID)
 	if request.Date != nil {
 		updates.AddNotNil("date", time.Unix(request.GetDate(), 0))
 	}
 	if err := m.Store.Maps().Update(ctx, request.GetID(), updates); err != nil {
 		if err == datastore.ErrNotExist {
 			return nil, status.Error(codes.NotFound, "map does not exit")
 		}
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to update map:").Error())
 	}
 	return &maps.NullResponse{}, nil
 }
 func (m Maps) Create(ctx context.Context, request *maps.MapRequest) (*maps.IdMessage, error) {
 	item, err := m.Store.Maps().Create(ctx, model.Map{
 		ID:          request.GetID(),
 		DisplayName: request.GetDisplayName(),
 		Creator:     request.GetCreator(),
 		GameID:      request.GetGameID(),
 		Date:        time.Unix(request.GetDate(), 0),
 	})
 	if err != nil {
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to create map:").Error())
 	}
 	return &maps.IdMessage{ID: item.ID}, nil
 }
 func (m Maps) Delete(ctx context.Context, message *maps.IdMessage) (*maps.NullResponse, error) {
 	if err := m.Store.Maps().Delete(ctx, message.GetID()); err != nil {
 		if err == datastore.ErrNotExist {
 			return nil, status.Error(codes.NotFound, "map does not exit")
 		}
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to delete map:").Error())
 	}
 	return &maps.NullResponse{}, nil
 }
 func (m Maps) List(ctx context.Context, request *maps.ListRequest) (*maps.MapList, error) {
 	filter := datastore.Optional()
 	fmt.Println(request)
 	if request.Filter != nil {
 		filter.AddNotNil("display_name", request.GetFilter().DisplayName)
 		filter.AddNotNil("creator", request.GetFilter().Creator)
 		filter.AddNotNil("game_id", request.GetFilter().GameID)
 	}
 	items, err := m.Store.Maps().List(ctx, filter, model.Page{
 		Number: request.GetPage().GetNumber(),
 		Size:   request.GetPage().GetSize(),
 	})
 	if err != nil {
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to get maps:").Error())
 	}
 	var resp maps.MapList
 	for i := 0; i < len(items); i++ {
 		resp.Maps = append(resp.Maps, &maps.MapResponse{
 			ID:          items[i].ID,
 			DisplayName: items[i].DisplayName,
 			Creator:     items[i].Creator,
 			GameID:      items[i].GameID,
 			Date:        items[i].Date.Unix(),
 		})
 	}
 	return &resp, nil
 }
--- a/internal/controller/users.go
+++ b/internal/controller/users.go
@ -1,117 +0,0 @@
 package controller
 import (
 	"context"
 	"git.itzana.me/strafesnet/maps-service/internal/datastore"
 	"git.itzana.me/strafesnet/maps-service/internal/model"
 	"git.itzana.me/strafesnet/go-grpc/users"
 	"github.com/pkg/errors"
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
 )
 type Users struct {
 	*users.UnimplementedUsersServiceServer
 	Store datastore.Datastore
 }
 func (u Users) Get(ctx context.Context, request *users.IdMessage) (*users.UserResponse, error) {
 	ur, err := u.Store.Users().Get(ctx, request.ID)
 	if err != nil {
 		if err == datastore.ErrNotExist {
 			return nil, status.Error(codes.NotFound, err.Error())
 		}
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to get user").Error())
 	}
 	return &users.UserResponse{
 		ID:       ur.ID,
 		Username: ur.Username,
 		StateID:  ur.StateID,
 	}, nil
 }
 func (u Users) GetList(ctx context.Context, list *users.IdList) (*users.UserList, error) {
 	uList, err := u.Store.Users().GetList(ctx, list.ID)
 	if err != nil {
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to get users").Error())
 	}
 	var resp users.UserList
 	for i := 0; i < len(uList); i++ {
 		resp.Users = append(resp.Users, &users.UserResponse{
 			ID:       uList[i].ID,
 			Username: uList[i].Username,
 			StateID:  uList[i].StateID,
 		})
 	}
 	return &resp, nil
 }
 func (u Users) Update(ctx context.Context, request *users.UserRequest) (*users.NullResponse, error) {
 	updates := datastore.Optional()
 	updates.AddNotNil("state_id", request.StateID)
 	updates.AddNotNil("username", request.Username)
 	if err := u.Store.Users().Update(ctx, request.GetID(), updates); err != nil {
 		if err == datastore.ErrNotExist {
 			return nil, status.Error(codes.NotFound, err.Error())
 		}
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to update user").Error())
 	}
 	return &users.NullResponse{}, nil
 }
 func (u Users) Create(ctx context.Context, request *users.UserRequest) (*users.IdMessage, error) {
 	us, err := u.Store.Users().Create(ctx, model.User{
 		ID:       request.GetID(),
 		Username: request.GetUsername(),
 		StateID:  request.GetStateID(),
 	})
 	if err != nil {
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to create user").Error())
 	}
 	return &users.IdMessage{ID: us.ID}, nil
 }
 func (u Users) Delete(ctx context.Context, request *users.IdMessage) (*users.NullResponse, error) {
 	if err := u.Store.Users().Delete(ctx, request.GetID()); err != nil {
 		if err == datastore.ErrNotExist {
 			return nil, status.Error(codes.NotFound, err.Error())
 		}
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to delete user").Error())
 	}
 	return &users.NullResponse{}, nil
 }
 func (u Users) List(ctx context.Context, request *users.ListRequest) (*users.UserList, error) {
 	filters := datastore.Optional()
 	if request.Filter != nil {
 		filters.AddNotNil("id", request.GetFilter().ID)
 		filters.AddNotNil("state_id", request.GetFilter().StateID)
 		filters.AddNotNil("username", request.GetFilter().Username)
 	}
 	uList, err := u.Store.Users().List(ctx, filters, model.Page{
 		Number: request.GetPage().GetNumber(),
 		Size:   request.GetPage().GetSize(),
 	})
 	if err != nil {
 		return nil, status.Error(codes.Internal, errors.Wrap(err, "failed to get filtered users").Error())
 	}
 	var uResp users.UserList
 	for i := 0; i < len(uList); i++ {
 		uResp.Users = append(uResp.Users, &users.UserResponse{
 			ID:       uList[i].ID,
 			Username: uList[i].Username,
 			StateID:  uList[i].StateID,
 		})
 	}
 	return &uResp, nil
 }
--- a/internal/datastore/datastore.go
+++ b/internal/datastore/datastore.go
@ -1,94 +0,0 @@
 package datastore
 import (
 	"context"
 	"errors"
 	"time"
 	"git.itzana.me/strafesnet/maps-service/internal/model"
 )
 var (
 	ErrNotExist = errors.New("resource does not exist")
 )
 type Datastore interface {
 	Times() Times
 	Users() Users
 	Bots() Bots
 	Maps() Maps
 	Events() Events
 	Servers() Servers
 	Transactions() Transactions
 	Ranks() Ranks
 }
 type Times interface {
 	Get(ctx context.Context, id int64) (model.Time, error)
 	Create(ctx context.Context, time model.Time) (model.Time, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	Delete(ctx context.Context, id int64) error
 	List(ctx context.Context, filters OptionalMap, blacklisted bool, page model.Page, sort uint32) (int64, []model.Time, error)
 	Rank(ctx context.Context, id int64) (int64, error)
 	DistinctStylePairs(ctx context.Context) ([]model.Time, error)
 }
 type Users interface {
 	Get(ctx context.Context, id int64) (model.User, error)
 	GetList(ctx context.Context, id []int64) ([]model.User, error)
 	Create(ctx context.Context, user model.User) (model.User, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	Delete(ctx context.Context, id int64) error
 	List(ctx context.Context, filters OptionalMap, page model.Page) ([]model.User, error)
 }
 type Bots interface {
 	Get(ctx context.Context, id int64) (model.Bot, error)
 	GetList(ctx context.Context, id []int64) ([]model.Bot, error)
 	Create(ctx context.Context, bot model.Bot) (model.Bot, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	Delete(ctx context.Context, id int64) error
 	List(ctx context.Context, filters OptionalMap, page model.Page) ([]model.Bot, error)
 }
 type Maps interface {
 	Get(ctx context.Context, id int64) (model.Map, error)
 	GetList(ctx context.Context, id []int64) ([]model.Map, error)
 	Create(ctx context.Context, time model.Map) (model.Map, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	Delete(ctx context.Context, id int64) error
 	List(ctx context.Context, filters OptionalMap, page model.Page) ([]model.Map, error)
 }
 type Events interface {
 	Latest(ctx context.Context, date int64, page model.Page) ([]model.Event, error)
 	Create(ctx context.Context, event model.Event) (model.Event, error)
 	Clean(ctx context.Context) error
 }
 type Servers interface {
 	Get(ctx context.Context, id string) (model.Server, error)
 	Create(ctx context.Context, server model.Server) (model.Server, error)
 	Update(ctx context.Context, id string, values OptionalMap) error
 	Delete(ctx context.Context, id string) error
 	DeleteByLastUpdated(ctx context.Context, date time.Time) error
 	List(ctx context.Context, filters OptionalMap, page model.Page) ([]model.Server, error)
 }
 type Transactions interface {
 	Balance(ctx context.Context, user int64) (int64, error)
 	Get(ctx context.Context, id string) (model.Transaction, error)
 	Create(ctx context.Context, transaction model.Transaction) (model.Transaction, error)
 	Update(ctx context.Context, id string, values OptionalMap) error
 	Delete(ctx context.Context, id string) error
 	List(ctx context.Context, filters OptionalMap, page model.Page) ([]model.Transaction, error)
 }
 type Ranks interface {
 	Delete(ctx context.Context, id int64) error
 	Get(ctx context.Context, user int64, style, game, mode int32, state []int32) (model.Rank, error)
 	List(ctx context.Context, style, game, mode int32, sort int64, state []int32, page model.Page) ([]model.Rank, error)
 	UpdateRankCalc(ctx context.Context) error
 	UpdateAll(ctx context.Context, style, game, mode int32) error
 	UpdateUsers(ctx context.Context, style, game, mode int32, users []int) error
 }
--- a/internal/datastore/gormstore/db.go
+++ b/internal/datastore/gormstore/db.go
@ -1,48 +0,0 @@
 package gormstore
 import (
 	"fmt"
 	"os"
 	"time"
 	"git.itzana.me/strafesnet/maps-service/internal/datastore"
 	"git.itzana.me/strafesnet/maps-service/internal/model"
 	"git.itzana.me/strafesnet/utils/logger"
 	"github.com/eko/gocache/lib/v4/cache"
 	gocache_store "github.com/eko/gocache/store/go_cache/v4"
 	gocache "github.com/patrickmn/go-cache"
 	log "github.com/sirupsen/logrus"
 	"gorm.io/driver/postgres"
 	"gorm.io/gorm"
 )
 func New(migrate bool) (datastore.Datastore, error) {
 	db, err := gorm.Open(postgres.Open(fmt.Sprintf("host=%s user=%s password=%s dbname=%s port=%s", os.Getenv("PG_HOST"), os.Getenv("PG_USER"), os.Getenv("PG_PASS"), os.Getenv("PG_DB"), os.Getenv("PG_PORT"))), &gorm.Config{
 		Logger: logger.New()})
 	if err != nil {
 		log.WithFields(log.Fields{
 			"PG_USER": os.Getenv("PG_USER"),
 			"PG_HOST": os.Getenv("PG_HOST"),
 			"PG_PORT": os.Getenv("PG_PORT"),
 			"PG_DB":   os.Getenv("PG_DB"),
 			"error":   err,
 		}).Errorln("failed to connect to database")
 		return nil, err
 	}
 	sqlDB, err := db.DB()
 	if err != nil {
 		return nil, err
 	}
 	sqlDB.SetMaxIdleConns(10)
 	sqlDB.SetMaxOpenConns(25)
 	if migrate {
 		if err := db.AutoMigrate(&model.Time{}, &model.User{}, &model.Bot{}, &model.Map{}, &model.Event{}, &model.Server{}, &model.Transaction{}, &model.Rank{}, &model.RankCalc{}); err != nil {
 			log.WithField("error", err).Errorln("database migration failed")
 			return nil, err
 		}
 	}
 	return &Gormstore{db, cache.New[[]byte](gocache_store.NewGoCache(gocache.New(5*time.Minute, 10*time.Minute)))}, nil
 }
--- a/internal/datastore/gormstore/gormstore.go
+++ b/internal/datastore/gormstore/gormstore.go
@ -1,44 +0,0 @@
 package gormstore
 import (
 	"git.itzana.me/strafesnet/maps-service/internal/datastore"
 	"github.com/eko/gocache/lib/v4/cache"
 	"gorm.io/gorm"
 )
 type Gormstore struct {
 	db    *gorm.DB
 	cache *cache.Cache[[]byte]
 }
 func (g Gormstore) Times() datastore.Times {
 	return &Times{db: g.db}
 }
 func (g Gormstore) Users() datastore.Users {
 	return &Users{db: g.db}
 }
 func (g Gormstore) Bots() datastore.Bots {
 	return &Bots{db: g.db}
 }
 func (g Gormstore) Maps() datastore.Maps {
 	return &Maps{db: g.db}
 }
 func (g Gormstore) Events() datastore.Events {
 	return &Events{db: g.db}
 }
 func (g Gormstore) Servers() datastore.Servers {
 	return &Servers{db: g.db}
 }
 func (g Gormstore) Transactions() datastore.Transactions {
 	return &Transactions{db: g.db}
 }
 func (g Gormstore) Ranks() datastore.Ranks {
 	return &Ranks{db: g.db, cache: g.cache}
 }
--- a/internal/datastore/gormstore/submissions.go
+++ b/internal/datastore/gormstore/submissions.go
@ -1,72 +0,0 @@
 package gormstore
 import (
 	"context"
 	"git.itzana.me/strafesnet/maps-service/internal/datastore"
 	"git.itzana.me/strafesnet/maps-service/internal/model"
 	"gorm.io/gorm"
 )
 type Maps struct {
 	db *gorm.DB
 }
 func (m Maps) Get(ctx context.Context, id int64) (model.Map, error) {
 	var smap model.Map
 	if err := m.db.WithContext(ctx).First(&smap, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return smap, datastore.ErrNotExist
 		}
 		return smap, err
 	}
 	return smap, nil
 }
 func (m Maps) GetList(ctx context.Context, id []int64) ([]model.Map, error) {
 	var mapList []model.Map
 	if err := m.db.WithContext(ctx).Find(&mapList, "id IN ?", id).Error; err != nil {
 		return mapList, err
 	}
 	return mapList, nil
 }
 func (m Maps) Create(ctx context.Context, smap model.Map) (model.Map, error) {
 	if err := m.db.WithContext(ctx).Create(&smap).Error; err != nil {
 		return smap, err
 	}
 	return smap, nil
 }
 func (m Maps) Update(ctx context.Context, id int64, values datastore.OptionalMap) error {
 	if err := m.db.WithContext(ctx).Model(&model.Map{}).Where("id = ?", id).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (m Maps) Delete(ctx context.Context, id int64) error {
 	if err := m.db.WithContext(ctx).Delete(&model.Map{}, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (m Maps) List(ctx context.Context, filters datastore.OptionalMap, page model.Page) ([]model.Map, error) {
 	var maps []model.Map
 	if err := m.db.WithContext(ctx).Where(filters.Map()).Offset(int((page.Number - 1) * page.Size)).Limit(int(page.Size)).Find(&maps).Error; err != nil {
 		return nil, err
 	}
 	return maps, nil
 }
--- a/internal/datastore/gormstore/users.go
+++ b/internal/datastore/gormstore/users.go
@ -1,72 +0,0 @@
 package gormstore
 import (
 	"context"
 	"git.itzana.me/strafesnet/maps-service/internal/datastore"
 	"git.itzana.me/strafesnet/maps-service/internal/model"
 	"gorm.io/gorm"
 )
 type Users struct {
 	db *gorm.DB
 }
 func (u Users) Get(ctx context.Context, id int64) (model.User, error) {
 	var user model.User
 	if err := u.db.WithContext(ctx).First(&user, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return user, datastore.ErrNotExist
 		}
 		return user, err
 	}
 	return user, nil
 }
 func (u Users) GetList(ctx context.Context, id []int64) ([]model.User, error) {
 	var user []model.User
 	if err := u.db.WithContext(ctx).Find(&user, "id IN ?", id).Error; err != nil {
 		return user, err
 	}
 	return user, nil
 }
 func (u Users) Create(ctx context.Context, user model.User) (model.User, error) {
 	if err := u.db.WithContext(ctx).Create(&user).Error; err != nil {
 		return user, err
 	}
 	return user, nil
 }
 func (u Users) Update(ctx context.Context, id int64, values datastore.OptionalMap) error {
 	if err := u.db.WithContext(ctx).Model(&model.User{}).Where("id = ?", id).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (u Users) Delete(ctx context.Context, id int64) error {
 	if err := u.db.WithContext(ctx).Delete(&model.User{}, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (u Users) List(ctx context.Context, filters datastore.OptionalMap, page model.Page) ([]model.User, error) {
 	var users []model.User
 	if err := u.db.WithContext(ctx).Where(filters.Map()).Offset(int((page.Number - 1) * page.Size)).Limit(int(page.Size)).Find(&users).Error; err != nil {
 		return nil, err
 	}
 	return users, nil
 }
--- a/internal/model/submission.go
+++ b/internal/model/submission.go
@ -1,11 +0,0 @@
 package model
 import "time"
 type Map struct {
 	ID          int64
 	DisplayName string
 	Creator     string
 	GameID      int32
 	Date        time.Time
 }
--- a/internal/model/user.go
+++ b/internal/model/user.go
@ -1,7 +0,0 @@
 package model
 type User struct {
 	ID       int64
 	Username string `gorm:"not null"`
 	StateID  int32  `gorm:"not null;default:0"`
 }
--- a/openapi.yaml
+++ b/openapi.yaml
@ -1,19 +1,18 @@
 openapi: 3.1.0
 info:
  title: StrafesNET Submissions - OpenAPI 3.1
-  description: Browse and manage map submissions in the staging pipeline.
+  description: Browse and manage map submissions.
  version: 0.1.0
 servers:
  - url: https://submissions.strafes.net/v1
 tags:
  - name: Submissions
    description: Submission operations
  - name: Scripts
    description: Script operations
  - name: ScriptPolicy
    description: Script policy operations
 paths:
 # status
 # 	submit
 # 	accept
 # 	publish
 # complete
  /submissions:
    get:
      summary: Get list of submissions
@ -31,6 +30,8 @@ paths:
          required: false
          schema:
            $ref: "#/components/schemas/SubmissionFilter"
      security:
      - cookieAuth: []
      responses:
        "200":
          description: Successful response
@ -51,18 +52,21 @@ paths:
      operationId: createSubmission
      tags:
        - Submissions
-# how to do this? body should have the submission in json or something
+      requestBody:
-#      content:
+        required: true
-#        application/json:
+        content:
-#          schema:
+          application/json:
-#           	$ref: "#/components/schemas/SubmissionCreate"
+            schema:
              $ref: '#/components/schemas/SubmissionCreate'
      security:
      - cookieAuth: []
      responses:
-        "200":
+        "201":
          description: Successful response
          content:
            application/json:
              schema:
-                $ref: "#/components/schemas/Submission"
+                $ref: "#/components/schemas/Id"
        default:
          description: General Error
          content:
@ -76,12 +80,9 @@ paths:
      tags:
        - Submissions
      parameters:
-        - name: SubmissionID
+        - $ref: '#/components/parameters/SubmissionID'
-          in: path
+      security:
-          required: true
+      - cookieAuth: []
          schema:
            type: integer
            format: int64
      responses:
        "200":
          description: Successful response
@ -96,18 +97,13 @@ paths:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/model:
-    patch:
+    post:
      summary: Update model following role restrictions
-      operationId: patchSubmissionModel
+      operationId: updateSubmissionModel
      tags:
        - Submissions
      parameters:
-        - name: SubmissionID
+        - $ref: '#/components/parameters/SubmissionID'
          in: path
          required: true
          schema:
            type: integer
            format: int64
        - name: ModelID
          in: query
          required: true
@ -120,8 +116,10 @@ paths:
          schema:
            type: integer
            format: int64
      security:
      - cookieAuth: []
      responses:
-        "200":
+        "204":
          description: Successful response
        default:
          description: General Error
@ -130,25 +128,17 @@ paths:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/completed:
-    patch:
+    post:
      summary: Retrieve map with ID
-      operationId: patchSubmissionCompleted
+      operationId: setSubmissionCompleted
      tags:
        - Submissions
      parameters:
-        - name: SubmissionID
+        - $ref: '#/components/parameters/SubmissionID'
-          in: path
+      security:
-          required: true
+      - cookieAuth: []
          schema:
            type: integer
            format: int64
        - name: Completed
          in: query
          required: true
          schema:
            type: boolean
      responses:
-        "200":
+        "204":
          description: Successful response
        default:
          description: General Error
@ -156,28 +146,361 @@ paths:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
-  /submissions/{SubmissionID}/status:
+  /submissions/{SubmissionID}/status/submit:
-    patch:
+    post:
-      summary: Update status following role restrictions
+      summary: Role Submitter changes status from UnderConstruction|ChangesRequested -> Submitted
-      operationId: patchSubmissionStatus
+      operationId: actionSubmissionSubmit
      tags:
        - Submissions
      parameters:
-        - name: SubmissionID
+        - $ref: '#/components/parameters/SubmissionID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/revoke:
    post:
      summary: Role Submitter changes status from Submitted|ChangesRequested -> UnderConstruction
      operationId: actionSubmissionRevoke
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/trigger-validate:
    post:
      summary: Role Reviewer triggers validation and changes status from Submitted|Accepted -> Validating
      operationId: actionSubmissionTriggerValidate
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/reject:
    post:
      summary: Role Reviewer changes status from Submitted -> Rejected
      operationId: actionSubmissionReject
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/request-changes:
    post:
      summary: Role Reviewer changes status from Validated|Accepted|Submitted -> ChangesRequested
      operationId: actionSubmissionRequestChanges
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/validator-validated:
    post:
      summary: (Internal endpoint) Role Validator changes status from Validating -> Validated
      operationId: actionSubmissionValidate
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/validator-published:
    post:
      summary: (Internal endpoint) Role Validator changes status from Publishing -> Published
      operationId: actionSubmissionPublish
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /submissions/{SubmissionID}/status/trigger-publish:
    post:
      summary: Role Admin changes status from Validated -> Publishing
      operationId: actionSubmissionTriggerPublish
      tags:
        - Submissions
      parameters:
        - $ref: '#/components/parameters/SubmissionID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /script-policy:
    post:
      summary: Create a new script policy
      operationId: createScriptPolicy
      tags:
        - ScriptPolicy
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ScriptPolicyCreate'
      security:
      - cookieAuth: []
      responses:
        "201":
          description: Successful response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Id"
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /script-policy/hash/{FromScriptHash}:
    get:
      summary: Get the policy for the given hash of script source code
      operationId: getScriptPolicyFromHash
      tags:
        - ScriptPolicy
      parameters:
        - name: FromScriptHash
          in: path
          required: true
          schema:
-            type: integer
+            type: string
-            format: int64
+            minLength: 16
-        - name: Status
+            maxLength: 16
-          in: query
+      security:
-          required: true
+      - cookieAuth: []
          schema:
            type: integer
            format: int32
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ScriptPolicy"
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /script-policy/id/{ScriptPolicyID}:
    get:
      summary: Get the specified script policy by ID
      operationId: getScriptPolicy
      tags:
        - ScriptPolicy
      parameters:
        - $ref: '#/components/parameters/ScriptPolicyID'
      security:
      - cookieAuth: []
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ScriptPolicy"
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
    post:
      summary: Update the specified script policy by ID
      operationId: updateScriptPolicy
      tags:
        - ScriptPolicy
      parameters:
        - $ref: '#/components/parameters/ScriptPolicyID'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ScriptPolicyUpdate'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
    delete:
      summary: Delete the specified script policy by ID
      operationId: deleteScriptPolicy
      tags:
        - ScriptPolicy
      parameters:
        - $ref: '#/components/parameters/ScriptPolicyID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /scripts:
    post:
      summary: Create a new script
      operationId: createScript
      tags:
        - Scripts
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ScriptCreate'
      security:
      - cookieAuth: []
      responses:
        "201":
          description: Successful response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Id"
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
  /scripts/{ScriptID}:
    get:
      summary: Get the specified script by ID
      operationId: getScript
      tags:
        - Scripts
      parameters:
        - $ref: '#/components/parameters/ScriptID'
      security:
      - cookieAuth: []
      responses:
        "200":
          description: Successful response
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Script"
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
    post:
      summary: Update the specified script by ID
      operationId: updateScript
      tags:
        - Scripts
      parameters:
        - $ref: '#/components/parameters/ScriptID'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ScriptUpdate'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Error"
    delete:
      summary: Delete the specified script by ID
      operationId: deleteScript
      tags:
        - Scripts
      parameters:
        - $ref: '#/components/parameters/ScriptID'
      security:
      - cookieAuth: []
      responses:
        "204":
          description: Successful response
        default:
          description: General Error
          content:
@ -185,19 +508,60 @@ paths:
              schema:
                $ref: "#/components/schemas/Error"
 components:
  securitySchemes:
    cookieAuth:
      type: apiKey
      in: cookie
      name: session_id
  parameters:
    SubmissionID:
      name: SubmissionID
      in: path
      required: true
      description: The unique identifier for a submission.
      schema:
        type: integer
        format: int64
    ScriptID:
      name: ScriptID
      in: path
      required: true
      description: The unique identifier for a script.
      schema:
        type: integer
        format: int64
    ScriptPolicyID:
      name: ScriptPolicyID
      in: path
      required: true
      description: The unique identifier for a script policy.
      schema:
        type: integer
        format: int64
  schemas:
-    User:
+    Id:
      required:
      - ID
      type: object
      properties:
        ID:
          type: integer
          format: int64
        Username:
          type: string
        StateID:
          type: integer
          format: int32
    Submission:
      required:
      - ID
      - DisplayName
      - Creator
      - GameID
      - CreatedAt
      - UpdatedAt
      - Submitter
      - AssetID
      - AssetVersion
      - Completed
      - SubmissionType
 #     - TargetAssetID
      - StatusID
      type: object
      properties:
        ID:
@ -205,15 +569,42 @@ components:
          format: int64
        DisplayName:
          type: string
          maxLength: 128
        Creator:
          type: string
          maxLength: 128
        GameID:
          type: integer
          format: int32
-        Date:
+        CreatedAt:
          type: integer
          format: int64
        UpdatedAt:
          type: integer
          format: int64
        Submitter:
          type: integer
          format: int64
        AssetID:
          type: integer
          format: int64
        AssetVersion:
          type: integer
          format: int64
        Completed:
          type: boolean
        SubmissionType:
          type: integer
          format: int32
        TargetAssetID:
          type: integer
          format: int64
        StatusID:
          type: integer
          format: int32
    SubmissionFilter:
      required:
      - ID
      type: object
      properties:
        ID:
@ -221,14 +612,142 @@ components:
          format: int64
        DisplayName:
          type: string
          maxLength: 128
        Creator:
          type: string
          maxLength: 128
        GameID:
          type: integer
          format: int32
-        Date:
+    SubmissionCreate:
      required:
      - DisplayName
      - Creator
      - GameID
      - AssetID
      - AssetVersion
 #     - TargetAssetID
      type: object
      properties:
        DisplayName:
          type: string
          maxLength: 128
        Creator:
          type: string
          maxLength: 128
        GameID:
          type: integer
          format: int32
        AssetID:
          type: integer
          format: int64
        AssetVersion:
          type: integer
          format: int64
        TargetAssetID:
          type: integer
          format: int64
    Script:
      required:
      - ID
      - Hash
      - Source
      - SubmissionID
      type: object
      properties:
        ID:
          type: integer
          format: int64
        Hash:
          type: string
          minLength: 16
          maxLength: 16
        Source:
          type: string
          maxLength: 1048576
        SubmissionID:
          type: integer
          format: int64
    ScriptCreate:
      required:
      - Source
 #     - SubmissionID
      type: object
      properties:
        Source:
          type: string
          maxLength: 1048576
        SubmissionID:
          type: integer
          format: int64
    ScriptUpdate:
      required:
      - ID
      type: object
      properties:
        ID:
          type: integer
          format: int64
        Source:
          type: string
          maxLength: 1048576
        SubmissionID:
          type: integer
          format: int64
    ScriptPolicy:
      required:
      - ID
      - FromScriptHash
      - ToScriptID
      - Policy
      type: object
      properties:
        ID:
          type: integer
          format: int64
        FromScriptHash:
          type: string
          minLength: 16
          maxLength: 16
        ToScriptID:
          type: integer
          format: int64
        Policy:
          type: integer
          format: int32
    ScriptPolicyCreate:
      required:
      - FromScriptID
      - ToScriptID
      - Policy
      type: object
      properties:
        FromScriptID:
          type: integer
          format: int64
        ToScriptID:
          type: integer
          format: int64
        Policy:
          type: integer
          format: int32
    ScriptPolicyUpdate:
      required:
      - ID
      type: object
      properties:
        ID:
          type: integer
          format: int64
        FromScriptID:
          type: integer
          format: int64
        ToScriptID:
          type: integer
          format: int64
        Policy:
          type: integer
          format: int32
    Pagination:
      type: object
      required:
--- a/pkg/api/oas_cfg_gen.go
+++ b/pkg/api/oas_cfg_gen.go
--- a/pkg/api/oas_client_gen.go
+++ b/pkg/api/oas_client_gen.go
--- a/pkg/api/oas_handlers_gen.go
+++ b/pkg/api/oas_handlers_gen.go
--- a/pkg/api/oas_json_gen.go
+++ b/pkg/api/oas_json_gen.go
--- a/pkg/api/oas_labeler_gen.go
+++ b/pkg/api/oas_labeler_gen.go
--- a/pkg/api/oas_middleware_gen.go
+++ b/pkg/api/oas_middleware_gen.go
--- a/pkg/api/oas_operations_gen.go
+++ b/pkg/api/oas_operations_gen.go
@ -0,0 +1,31 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 // OperationName is the ogen operation name
 type OperationName = string
 const (
 	ActionSubmissionPublishOperation         OperationName = "ActionSubmissionPublish"
 	ActionSubmissionRejectOperation          OperationName = "ActionSubmissionReject"
 	ActionSubmissionRequestChangesOperation  OperationName = "ActionSubmissionRequestChanges"
 	ActionSubmissionRevokeOperation          OperationName = "ActionSubmissionRevoke"
 	ActionSubmissionSubmitOperation          OperationName = "ActionSubmissionSubmit"
 	ActionSubmissionTriggerPublishOperation  OperationName = "ActionSubmissionTriggerPublish"
 	ActionSubmissionTriggerValidateOperation OperationName = "ActionSubmissionTriggerValidate"
 	ActionSubmissionValidateOperation        OperationName = "ActionSubmissionValidate"
 	CreateScriptOperation                    OperationName = "CreateScript"
 	CreateScriptPolicyOperation              OperationName = "CreateScriptPolicy"
 	CreateSubmissionOperation                OperationName = "CreateSubmission"
 	DeleteScriptOperation                    OperationName = "DeleteScript"
 	DeleteScriptPolicyOperation              OperationName = "DeleteScriptPolicy"
 	GetScriptOperation                       OperationName = "GetScript"
 	GetScriptPolicyOperation                 OperationName = "GetScriptPolicy"
 	GetScriptPolicyFromHashOperation         OperationName = "GetScriptPolicyFromHash"
 	GetSubmissionOperation                   OperationName = "GetSubmission"
 	ListSubmissionsOperation                 OperationName = "ListSubmissions"
 	SetSubmissionCompletedOperation          OperationName = "SetSubmissionCompleted"
 	UpdateScriptOperation                    OperationName = "UpdateScript"
 	UpdateScriptPolicyOperation              OperationName = "UpdateScriptPolicy"
 	UpdateSubmissionModelOperation           OperationName = "UpdateSubmissionModel"
 )
--- a/pkg/api/oas_parameters_gen.go
+++ b/pkg/api/oas_parameters_gen.go
--- a/pkg/api/oas_request_decoders_gen.go
+++ b/pkg/api/oas_request_decoders_gen.go
@ -0,0 +1,355 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"io"
 	"mime"
 	"net/http"
 	"github.com/go-faster/errors"
 	"github.com/go-faster/jx"
 	"go.uber.org/multierr"
 	"github.com/ogen-go/ogen/ogenerrors"
 	"github.com/ogen-go/ogen/validate"
 )
 func (s *Server) decodeCreateScriptRequest(r *http.Request) (
 	req *ScriptCreate,
 	close func() error,
 	rerr error,
 ) {
 	var closers []func() error
 	close = func() error {
 		var merr error
 		// Close in reverse order, to match defer behavior.
 		for i := len(closers) - 1; i >= 0; i-- {
 			c := closers[i]
 			merr = multierr.Append(merr, c())
 		}
 		return merr
 	}
 	defer func() {
 		if rerr != nil {
 			rerr = multierr.Append(rerr, close())
 		}
 	}()
 	ct, _, err := mime.ParseMediaType(r.Header.Get("Content-Type"))
 	if err != nil {
 		return req, close, errors.Wrap(err, "parse media type")
 	}
 	switch {
 	case ct == "application/json":
 		if r.ContentLength == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		buf, err := io.ReadAll(r.Body)
 		if err != nil {
 			return req, close, err
 		}
 		if len(buf) == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		d := jx.DecodeBytes(buf)
 		var request ScriptCreate
 		if err := func() error {
 			if err := request.Decode(d); err != nil {
 				return err
 			}
 			if err := d.Skip(); err != io.EOF {
 				return errors.New("unexpected trailing data")
 			}
 			return nil
 		}(); err != nil {
 			err = &ogenerrors.DecodeBodyError{
 				ContentType: ct,
 				Body:        buf,
 				Err:         err,
 			}
 			return req, close, err
 		}
 		if err := func() error {
 			if err := request.Validate(); err != nil {
 				return err
 			}
 			return nil
 		}(); err != nil {
 			return req, close, errors.Wrap(err, "validate")
 		}
 		return &request, close, nil
 	default:
 		return req, close, validate.InvalidContentType(ct)
 	}
 }
 func (s *Server) decodeCreateScriptPolicyRequest(r *http.Request) (
 	req *ScriptPolicyCreate,
 	close func() error,
 	rerr error,
 ) {
 	var closers []func() error
 	close = func() error {
 		var merr error
 		// Close in reverse order, to match defer behavior.
 		for i := len(closers) - 1; i >= 0; i-- {
 			c := closers[i]
 			merr = multierr.Append(merr, c())
 		}
 		return merr
 	}
 	defer func() {
 		if rerr != nil {
 			rerr = multierr.Append(rerr, close())
 		}
 	}()
 	ct, _, err := mime.ParseMediaType(r.Header.Get("Content-Type"))
 	if err != nil {
 		return req, close, errors.Wrap(err, "parse media type")
 	}
 	switch {
 	case ct == "application/json":
 		if r.ContentLength == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		buf, err := io.ReadAll(r.Body)
 		if err != nil {
 			return req, close, err
 		}
 		if len(buf) == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		d := jx.DecodeBytes(buf)
 		var request ScriptPolicyCreate
 		if err := func() error {
 			if err := request.Decode(d); err != nil {
 				return err
 			}
 			if err := d.Skip(); err != io.EOF {
 				return errors.New("unexpected trailing data")
 			}
 			return nil
 		}(); err != nil {
 			err = &ogenerrors.DecodeBodyError{
 				ContentType: ct,
 				Body:        buf,
 				Err:         err,
 			}
 			return req, close, err
 		}
 		return &request, close, nil
 	default:
 		return req, close, validate.InvalidContentType(ct)
 	}
 }
 func (s *Server) decodeCreateSubmissionRequest(r *http.Request) (
 	req *SubmissionCreate,
 	close func() error,
 	rerr error,
 ) {
 	var closers []func() error
 	close = func() error {
 		var merr error
 		// Close in reverse order, to match defer behavior.
 		for i := len(closers) - 1; i >= 0; i-- {
 			c := closers[i]
 			merr = multierr.Append(merr, c())
 		}
 		return merr
 	}
 	defer func() {
 		if rerr != nil {
 			rerr = multierr.Append(rerr, close())
 		}
 	}()
 	ct, _, err := mime.ParseMediaType(r.Header.Get("Content-Type"))
 	if err != nil {
 		return req, close, errors.Wrap(err, "parse media type")
 	}
 	switch {
 	case ct == "application/json":
 		if r.ContentLength == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		buf, err := io.ReadAll(r.Body)
 		if err != nil {
 			return req, close, err
 		}
 		if len(buf) == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		d := jx.DecodeBytes(buf)
 		var request SubmissionCreate
 		if err := func() error {
 			if err := request.Decode(d); err != nil {
 				return err
 			}
 			if err := d.Skip(); err != io.EOF {
 				return errors.New("unexpected trailing data")
 			}
 			return nil
 		}(); err != nil {
 			err = &ogenerrors.DecodeBodyError{
 				ContentType: ct,
 				Body:        buf,
 				Err:         err,
 			}
 			return req, close, err
 		}
 		if err := func() error {
 			if err := request.Validate(); err != nil {
 				return err
 			}
 			return nil
 		}(); err != nil {
 			return req, close, errors.Wrap(err, "validate")
 		}
 		return &request, close, nil
 	default:
 		return req, close, validate.InvalidContentType(ct)
 	}
 }
 func (s *Server) decodeUpdateScriptRequest(r *http.Request) (
 	req *ScriptUpdate,
 	close func() error,
 	rerr error,
 ) {
 	var closers []func() error
 	close = func() error {
 		var merr error
 		// Close in reverse order, to match defer behavior.
 		for i := len(closers) - 1; i >= 0; i-- {
 			c := closers[i]
 			merr = multierr.Append(merr, c())
 		}
 		return merr
 	}
 	defer func() {
 		if rerr != nil {
 			rerr = multierr.Append(rerr, close())
 		}
 	}()
 	ct, _, err := mime.ParseMediaType(r.Header.Get("Content-Type"))
 	if err != nil {
 		return req, close, errors.Wrap(err, "parse media type")
 	}
 	switch {
 	case ct == "application/json":
 		if r.ContentLength == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		buf, err := io.ReadAll(r.Body)
 		if err != nil {
 			return req, close, err
 		}
 		if len(buf) == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		d := jx.DecodeBytes(buf)
 		var request ScriptUpdate
 		if err := func() error {
 			if err := request.Decode(d); err != nil {
 				return err
 			}
 			if err := d.Skip(); err != io.EOF {
 				return errors.New("unexpected trailing data")
 			}
 			return nil
 		}(); err != nil {
 			err = &ogenerrors.DecodeBodyError{
 				ContentType: ct,
 				Body:        buf,
 				Err:         err,
 			}
 			return req, close, err
 		}
 		if err := func() error {
 			if err := request.Validate(); err != nil {
 				return err
 			}
 			return nil
 		}(); err != nil {
 			return req, close, errors.Wrap(err, "validate")
 		}
 		return &request, close, nil
 	default:
 		return req, close, validate.InvalidContentType(ct)
 	}
 }
 func (s *Server) decodeUpdateScriptPolicyRequest(r *http.Request) (
 	req *ScriptPolicyUpdate,
 	close func() error,
 	rerr error,
 ) {
 	var closers []func() error
 	close = func() error {
 		var merr error
 		// Close in reverse order, to match defer behavior.
 		for i := len(closers) - 1; i >= 0; i-- {
 			c := closers[i]
 			merr = multierr.Append(merr, c())
 		}
 		return merr
 	}
 	defer func() {
 		if rerr != nil {
 			rerr = multierr.Append(rerr, close())
 		}
 	}()
 	ct, _, err := mime.ParseMediaType(r.Header.Get("Content-Type"))
 	if err != nil {
 		return req, close, errors.Wrap(err, "parse media type")
 	}
 	switch {
 	case ct == "application/json":
 		if r.ContentLength == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		buf, err := io.ReadAll(r.Body)
 		if err != nil {
 			return req, close, err
 		}
 		if len(buf) == 0 {
 			return req, close, validate.ErrBodyRequired
 		}
 		d := jx.DecodeBytes(buf)
 		var request ScriptPolicyUpdate
 		if err := func() error {
 			if err := request.Decode(d); err != nil {
 				return err
 			}
 			if err := d.Skip(); err != io.EOF {
 				return errors.New("unexpected trailing data")
 			}
 			return nil
 		}(); err != nil {
 			err = &ogenerrors.DecodeBodyError{
 				ContentType: ct,
 				Body:        buf,
 				Err:         err,
 			}
 			return req, close, err
 		}
 		return &request, close, nil
 	default:
 		return req, close, validate.InvalidContentType(ct)
 	}
 }
--- a/pkg/api/oas_request_encoders_gen.go
+++ b/pkg/api/oas_request_encoders_gen.go
@ -0,0 +1,82 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"bytes"
 	"net/http"
 	"github.com/go-faster/jx"
 	ht "github.com/ogen-go/ogen/http"
 )
 func encodeCreateScriptRequest(
 	req *ScriptCreate,
 	r *http.Request,
 ) error {
 	const contentType = "application/json"
 	e := new(jx.Encoder)
 	{
 		req.Encode(e)
 	}
 	encoded := e.Bytes()
 	ht.SetBody(r, bytes.NewReader(encoded), contentType)
 	return nil
 }
 func encodeCreateScriptPolicyRequest(
 	req *ScriptPolicyCreate,
 	r *http.Request,
 ) error {
 	const contentType = "application/json"
 	e := new(jx.Encoder)
 	{
 		req.Encode(e)
 	}
 	encoded := e.Bytes()
 	ht.SetBody(r, bytes.NewReader(encoded), contentType)
 	return nil
 }
 func encodeCreateSubmissionRequest(
 	req *SubmissionCreate,
 	r *http.Request,
 ) error {
 	const contentType = "application/json"
 	e := new(jx.Encoder)
 	{
 		req.Encode(e)
 	}
 	encoded := e.Bytes()
 	ht.SetBody(r, bytes.NewReader(encoded), contentType)
 	return nil
 }
 func encodeUpdateScriptRequest(
 	req *ScriptUpdate,
 	r *http.Request,
 ) error {
 	const contentType = "application/json"
 	e := new(jx.Encoder)
 	{
 		req.Encode(e)
 	}
 	encoded := e.Bytes()
 	ht.SetBody(r, bytes.NewReader(encoded), contentType)
 	return nil
 }
 func encodeUpdateScriptPolicyRequest(
 	req *ScriptPolicyUpdate,
 	r *http.Request,
 ) error {
 	const contentType = "application/json"
 	e := new(jx.Encoder)
 	{
 		req.Encode(e)
 	}
 	encoded := e.Bytes()
 	ht.SetBody(r, bytes.NewReader(encoded), contentType)
 	return nil
 }
--- a/pkg/api/oas_response_decoders_gen.go
+++ b/pkg/api/oas_response_decoders_gen.go
--- a/pkg/api/oas_response_encoders_gen.go
+++ b/pkg/api/oas_response_encoders_gen.go
@ -0,0 +1,255 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"net/http"
 	"github.com/go-faster/errors"
 	"github.com/go-faster/jx"
 	"go.opentelemetry.io/otel/codes"
 	"go.opentelemetry.io/otel/trace"
 	ht "github.com/ogen-go/ogen/http"
 )
 func encodeActionSubmissionPublishResponse(response *ActionSubmissionPublishNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionRejectResponse(response *ActionSubmissionRejectNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionRequestChangesResponse(response *ActionSubmissionRequestChangesNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionRevokeResponse(response *ActionSubmissionRevokeNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionSubmitResponse(response *ActionSubmissionSubmitNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionTriggerPublishResponse(response *ActionSubmissionTriggerPublishNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionTriggerValidateResponse(response *ActionSubmissionTriggerValidateNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeActionSubmissionValidateResponse(response *ActionSubmissionValidateNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeCreateScriptResponse(response *ID, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(201)
 	span.SetStatus(codes.Ok, http.StatusText(201))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeCreateScriptPolicyResponse(response *ID, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(201)
 	span.SetStatus(codes.Ok, http.StatusText(201))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeCreateSubmissionResponse(response *ID, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(201)
 	span.SetStatus(codes.Ok, http.StatusText(201))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeDeleteScriptResponse(response *DeleteScriptNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeDeleteScriptPolicyResponse(response *DeleteScriptPolicyNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeGetScriptResponse(response *Script, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeGetScriptPolicyResponse(response *ScriptPolicy, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeGetScriptPolicyFromHashResponse(response *ScriptPolicy, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeGetSubmissionResponse(response *Submission, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeListSubmissionsResponse(response []Submission, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(200)
 	span.SetStatus(codes.Ok, http.StatusText(200))
 	e := new(jx.Encoder)
 	e.ArrStart()
 	for _, elem := range response {
 		elem.Encode(e)
 	}
 	e.ArrEnd()
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	return nil
 }
 func encodeSetSubmissionCompletedResponse(response *SetSubmissionCompletedNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeUpdateScriptResponse(response *UpdateScriptNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeUpdateScriptPolicyResponse(response *UpdateScriptPolicyNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeUpdateSubmissionModelResponse(response *UpdateSubmissionModelNoContent, w http.ResponseWriter, span trace.Span) error {
 	w.WriteHeader(204)
 	span.SetStatus(codes.Ok, http.StatusText(204))
 	return nil
 }
 func encodeErrorResponse(response *ErrorStatusCode, w http.ResponseWriter, span trace.Span) error {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	code := response.StatusCode
 	if code == 0 {
 		// Set default status code.
 		code = http.StatusOK
 	}
 	w.WriteHeader(code)
 	if st := http.StatusText(code); code >= http.StatusBadRequest {
 		span.SetStatus(codes.Error, st)
 	} else {
 		span.SetStatus(codes.Ok, st)
 	}
 	e := new(jx.Encoder)
 	response.Response.Encode(e)
 	if _, err := e.WriteTo(w); err != nil {
 		return errors.Wrap(err, "write")
 	}
 	if code >= http.StatusInternalServerError {
 		return errors.Wrapf(ht.ErrInternalServerErrorResponse, "code: %d, message: %s", code, http.StatusText(code))
 	}
 	return nil
 }
--- a/pkg/api/oas_router_gen.go
+++ b/pkg/api/oas_router_gen.go
--- a/pkg/api/oas_schemas_gen.go
+++ b/pkg/api/oas_schemas_gen.go
@ -0,0 +1,854 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"fmt"
 )
 func (s *ErrorStatusCode) Error() string {
 	return fmt.Sprintf("code %d: %+v", s.StatusCode, s.Response)
 }
 // ActionSubmissionPublishNoContent is response for ActionSubmissionPublish operation.
 type ActionSubmissionPublishNoContent struct{}
 // ActionSubmissionRejectNoContent is response for ActionSubmissionReject operation.
 type ActionSubmissionRejectNoContent struct{}
 // ActionSubmissionRequestChangesNoContent is response for ActionSubmissionRequestChanges operation.
 type ActionSubmissionRequestChangesNoContent struct{}
 // ActionSubmissionRevokeNoContent is response for ActionSubmissionRevoke operation.
 type ActionSubmissionRevokeNoContent struct{}
 // ActionSubmissionSubmitNoContent is response for ActionSubmissionSubmit operation.
 type ActionSubmissionSubmitNoContent struct{}
 // ActionSubmissionTriggerPublishNoContent is response for ActionSubmissionTriggerPublish operation.
 type ActionSubmissionTriggerPublishNoContent struct{}
 // ActionSubmissionTriggerValidateNoContent is response for ActionSubmissionTriggerValidate operation.
 type ActionSubmissionTriggerValidateNoContent struct{}
 // ActionSubmissionValidateNoContent is response for ActionSubmissionValidate operation.
 type ActionSubmissionValidateNoContent struct{}
 type CookieAuth struct {
 	APIKey string
 }
 // GetAPIKey returns the value of APIKey.
 func (s *CookieAuth) GetAPIKey() string {
 	return s.APIKey
 }
 // SetAPIKey sets the value of APIKey.
 func (s *CookieAuth) SetAPIKey(val string) {
 	s.APIKey = val
 }
 // DeleteScriptNoContent is response for DeleteScript operation.
 type DeleteScriptNoContent struct{}
 // DeleteScriptPolicyNoContent is response for DeleteScriptPolicy operation.
 type DeleteScriptPolicyNoContent struct{}
 // Represents error object.
 // Ref: #/components/schemas/Error
 type Error struct {
 	Code    int64  `json:"code"`
 	Message string `json:"message"`
 }
 // GetCode returns the value of Code.
 func (s *Error) GetCode() int64 {
 	return s.Code
 }
 // GetMessage returns the value of Message.
 func (s *Error) GetMessage() string {
 	return s.Message
 }
 // SetCode sets the value of Code.
 func (s *Error) SetCode(val int64) {
 	s.Code = val
 }
 // SetMessage sets the value of Message.
 func (s *Error) SetMessage(val string) {
 	s.Message = val
 }
 // ErrorStatusCode wraps Error with StatusCode.
 type ErrorStatusCode struct {
 	StatusCode int
 	Response   Error
 }
 // GetStatusCode returns the value of StatusCode.
 func (s *ErrorStatusCode) GetStatusCode() int {
 	return s.StatusCode
 }
 // GetResponse returns the value of Response.
 func (s *ErrorStatusCode) GetResponse() Error {
 	return s.Response
 }
 // SetStatusCode sets the value of StatusCode.
 func (s *ErrorStatusCode) SetStatusCode(val int) {
 	s.StatusCode = val
 }
 // SetResponse sets the value of Response.
 func (s *ErrorStatusCode) SetResponse(val Error) {
 	s.Response = val
 }
 // Ref: #/components/schemas/Id
 type ID struct {
 	ID int64 `json:"ID"`
 }
 // GetID returns the value of ID.
 func (s *ID) GetID() int64 {
 	return s.ID
 }
 // SetID sets the value of ID.
 func (s *ID) SetID(val int64) {
 	s.ID = val
 }
 // NewOptInt32 returns new OptInt32 with value set to v.
 func NewOptInt32(v int32) OptInt32 {
 	return OptInt32{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptInt32 is optional int32.
 type OptInt32 struct {
 	Value int32
 	Set   bool
 }
 // IsSet returns true if OptInt32 was set.
 func (o OptInt32) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptInt32) Reset() {
 	var v int32
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptInt32) SetTo(v int32) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptInt32) Get() (v int32, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptInt32) Or(d int32) int32 {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // NewOptInt64 returns new OptInt64 with value set to v.
 func NewOptInt64(v int64) OptInt64 {
 	return OptInt64{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptInt64 is optional int64.
 type OptInt64 struct {
 	Value int64
 	Set   bool
 }
 // IsSet returns true if OptInt64 was set.
 func (o OptInt64) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptInt64) Reset() {
 	var v int64
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptInt64) SetTo(v int64) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptInt64) Get() (v int64, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptInt64) Or(d int64) int64 {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // NewOptString returns new OptString with value set to v.
 func NewOptString(v string) OptString {
 	return OptString{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptString is optional string.
 type OptString struct {
 	Value string
 	Set   bool
 }
 // IsSet returns true if OptString was set.
 func (o OptString) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptString) Reset() {
 	var v string
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptString) SetTo(v string) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptString) Get() (v string, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptString) Or(d string) string {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // NewOptSubmissionFilter returns new OptSubmissionFilter with value set to v.
 func NewOptSubmissionFilter(v SubmissionFilter) OptSubmissionFilter {
 	return OptSubmissionFilter{
 		Value: v,
 		Set:   true,
 	}
 }
 // OptSubmissionFilter is optional SubmissionFilter.
 type OptSubmissionFilter struct {
 	Value SubmissionFilter
 	Set   bool
 }
 // IsSet returns true if OptSubmissionFilter was set.
 func (o OptSubmissionFilter) IsSet() bool { return o.Set }
 // Reset unsets value.
 func (o *OptSubmissionFilter) Reset() {
 	var v SubmissionFilter
 	o.Value = v
 	o.Set = false
 }
 // SetTo sets value to v.
 func (o *OptSubmissionFilter) SetTo(v SubmissionFilter) {
 	o.Set = true
 	o.Value = v
 }
 // Get returns value and boolean that denotes whether value was set.
 func (o OptSubmissionFilter) Get() (v SubmissionFilter, ok bool) {
 	if !o.Set {
 		return v, false
 	}
 	return o.Value, true
 }
 // Or returns value if set, or given parameter if does not.
 func (o OptSubmissionFilter) Or(d SubmissionFilter) SubmissionFilter {
 	if v, ok := o.Get(); ok {
 		return v
 	}
 	return d
 }
 // Ref: #/components/schemas/Pagination
 type Pagination struct {
 	Page  int32 `json:"Page"`
 	Limit int32 `json:"Limit"`
 }
 // GetPage returns the value of Page.
 func (s *Pagination) GetPage() int32 {
 	return s.Page
 }
 // GetLimit returns the value of Limit.
 func (s *Pagination) GetLimit() int32 {
 	return s.Limit
 }
 // SetPage sets the value of Page.
 func (s *Pagination) SetPage(val int32) {
 	s.Page = val
 }
 // SetLimit sets the value of Limit.
 func (s *Pagination) SetLimit(val int32) {
 	s.Limit = val
 }
 // Ref: #/components/schemas/Script
 type Script struct {
 	ID           int64  `json:"ID"`
 	Hash         string `json:"Hash"`
 	Source       string `json:"Source"`
 	SubmissionID int64  `json:"SubmissionID"`
 }
 // GetID returns the value of ID.
 func (s *Script) GetID() int64 {
 	return s.ID
 }
 // GetHash returns the value of Hash.
 func (s *Script) GetHash() string {
 	return s.Hash
 }
 // GetSource returns the value of Source.
 func (s *Script) GetSource() string {
 	return s.Source
 }
 // GetSubmissionID returns the value of SubmissionID.
 func (s *Script) GetSubmissionID() int64 {
 	return s.SubmissionID
 }
 // SetID sets the value of ID.
 func (s *Script) SetID(val int64) {
 	s.ID = val
 }
 // SetHash sets the value of Hash.
 func (s *Script) SetHash(val string) {
 	s.Hash = val
 }
 // SetSource sets the value of Source.
 func (s *Script) SetSource(val string) {
 	s.Source = val
 }
 // SetSubmissionID sets the value of SubmissionID.
 func (s *Script) SetSubmissionID(val int64) {
 	s.SubmissionID = val
 }
 // Ref: #/components/schemas/ScriptCreate
 type ScriptCreate struct {
 	Source       string   `json:"Source"`
 	SubmissionID OptInt64 `json:"SubmissionID"`
 }
 // GetSource returns the value of Source.
 func (s *ScriptCreate) GetSource() string {
 	return s.Source
 }
 // GetSubmissionID returns the value of SubmissionID.
 func (s *ScriptCreate) GetSubmissionID() OptInt64 {
 	return s.SubmissionID
 }
 // SetSource sets the value of Source.
 func (s *ScriptCreate) SetSource(val string) {
 	s.Source = val
 }
 // SetSubmissionID sets the value of SubmissionID.
 func (s *ScriptCreate) SetSubmissionID(val OptInt64) {
 	s.SubmissionID = val
 }
 // Ref: #/components/schemas/ScriptPolicy
 type ScriptPolicy struct {
 	ID             int64  `json:"ID"`
 	FromScriptHash string `json:"FromScriptHash"`
 	ToScriptID     int64  `json:"ToScriptID"`
 	Policy         int32  `json:"Policy"`
 }
 // GetID returns the value of ID.
 func (s *ScriptPolicy) GetID() int64 {
 	return s.ID
 }
 // GetFromScriptHash returns the value of FromScriptHash.
 func (s *ScriptPolicy) GetFromScriptHash() string {
 	return s.FromScriptHash
 }
 // GetToScriptID returns the value of ToScriptID.
 func (s *ScriptPolicy) GetToScriptID() int64 {
 	return s.ToScriptID
 }
 // GetPolicy returns the value of Policy.
 func (s *ScriptPolicy) GetPolicy() int32 {
 	return s.Policy
 }
 // SetID sets the value of ID.
 func (s *ScriptPolicy) SetID(val int64) {
 	s.ID = val
 }
 // SetFromScriptHash sets the value of FromScriptHash.
 func (s *ScriptPolicy) SetFromScriptHash(val string) {
 	s.FromScriptHash = val
 }
 // SetToScriptID sets the value of ToScriptID.
 func (s *ScriptPolicy) SetToScriptID(val int64) {
 	s.ToScriptID = val
 }
 // SetPolicy sets the value of Policy.
 func (s *ScriptPolicy) SetPolicy(val int32) {
 	s.Policy = val
 }
 // Ref: #/components/schemas/ScriptPolicyCreate
 type ScriptPolicyCreate struct {
 	FromScriptID int64 `json:"FromScriptID"`
 	ToScriptID   int64 `json:"ToScriptID"`
 	Policy       int32 `json:"Policy"`
 }
 // GetFromScriptID returns the value of FromScriptID.
 func (s *ScriptPolicyCreate) GetFromScriptID() int64 {
 	return s.FromScriptID
 }
 // GetToScriptID returns the value of ToScriptID.
 func (s *ScriptPolicyCreate) GetToScriptID() int64 {
 	return s.ToScriptID
 }
 // GetPolicy returns the value of Policy.
 func (s *ScriptPolicyCreate) GetPolicy() int32 {
 	return s.Policy
 }
 // SetFromScriptID sets the value of FromScriptID.
 func (s *ScriptPolicyCreate) SetFromScriptID(val int64) {
 	s.FromScriptID = val
 }
 // SetToScriptID sets the value of ToScriptID.
 func (s *ScriptPolicyCreate) SetToScriptID(val int64) {
 	s.ToScriptID = val
 }
 // SetPolicy sets the value of Policy.
 func (s *ScriptPolicyCreate) SetPolicy(val int32) {
 	s.Policy = val
 }
 // Ref: #/components/schemas/ScriptPolicyUpdate
 type ScriptPolicyUpdate struct {
 	ID           int64    `json:"ID"`
 	FromScriptID OptInt64 `json:"FromScriptID"`
 	ToScriptID   OptInt64 `json:"ToScriptID"`
 	Policy       OptInt32 `json:"Policy"`
 }
 // GetID returns the value of ID.
 func (s *ScriptPolicyUpdate) GetID() int64 {
 	return s.ID
 }
 // GetFromScriptID returns the value of FromScriptID.
 func (s *ScriptPolicyUpdate) GetFromScriptID() OptInt64 {
 	return s.FromScriptID
 }
 // GetToScriptID returns the value of ToScriptID.
 func (s *ScriptPolicyUpdate) GetToScriptID() OptInt64 {
 	return s.ToScriptID
 }
 // GetPolicy returns the value of Policy.
 func (s *ScriptPolicyUpdate) GetPolicy() OptInt32 {
 	return s.Policy
 }
 // SetID sets the value of ID.
 func (s *ScriptPolicyUpdate) SetID(val int64) {
 	s.ID = val
 }
 // SetFromScriptID sets the value of FromScriptID.
 func (s *ScriptPolicyUpdate) SetFromScriptID(val OptInt64) {
 	s.FromScriptID = val
 }
 // SetToScriptID sets the value of ToScriptID.
 func (s *ScriptPolicyUpdate) SetToScriptID(val OptInt64) {
 	s.ToScriptID = val
 }
 // SetPolicy sets the value of Policy.
 func (s *ScriptPolicyUpdate) SetPolicy(val OptInt32) {
 	s.Policy = val
 }
 // Ref: #/components/schemas/ScriptUpdate
 type ScriptUpdate struct {
 	ID           int64     `json:"ID"`
 	Source       OptString `json:"Source"`
 	SubmissionID OptInt64  `json:"SubmissionID"`
 }
 // GetID returns the value of ID.
 func (s *ScriptUpdate) GetID() int64 {
 	return s.ID
 }
 // GetSource returns the value of Source.
 func (s *ScriptUpdate) GetSource() OptString {
 	return s.Source
 }
 // GetSubmissionID returns the value of SubmissionID.
 func (s *ScriptUpdate) GetSubmissionID() OptInt64 {
 	return s.SubmissionID
 }
 // SetID sets the value of ID.
 func (s *ScriptUpdate) SetID(val int64) {
 	s.ID = val
 }
 // SetSource sets the value of Source.
 func (s *ScriptUpdate) SetSource(val OptString) {
 	s.Source = val
 }
 // SetSubmissionID sets the value of SubmissionID.
 func (s *ScriptUpdate) SetSubmissionID(val OptInt64) {
 	s.SubmissionID = val
 }
 // SetSubmissionCompletedNoContent is response for SetSubmissionCompleted operation.
 type SetSubmissionCompletedNoContent struct{}
 // Ref: #/components/schemas/Submission
 type Submission struct {
 	ID             int64    `json:"ID"`
 	DisplayName    string   `json:"DisplayName"`
 	Creator        string   `json:"Creator"`
 	GameID         int32    `json:"GameID"`
 	CreatedAt      int64    `json:"CreatedAt"`
 	UpdatedAt      int64    `json:"UpdatedAt"`
 	Submitter      int64    `json:"Submitter"`
 	AssetID        int64    `json:"AssetID"`
 	AssetVersion   int64    `json:"AssetVersion"`
 	Completed      bool     `json:"Completed"`
 	SubmissionType int32    `json:"SubmissionType"`
 	TargetAssetID  OptInt64 `json:"TargetAssetID"`
 	StatusID       int32    `json:"StatusID"`
 }
 // GetID returns the value of ID.
 func (s *Submission) GetID() int64 {
 	return s.ID
 }
 // GetDisplayName returns the value of DisplayName.
 func (s *Submission) GetDisplayName() string {
 	return s.DisplayName
 }
 // GetCreator returns the value of Creator.
 func (s *Submission) GetCreator() string {
 	return s.Creator
 }
 // GetGameID returns the value of GameID.
 func (s *Submission) GetGameID() int32 {
 	return s.GameID
 }
 // GetCreatedAt returns the value of CreatedAt.
 func (s *Submission) GetCreatedAt() int64 {
 	return s.CreatedAt
 }
 // GetUpdatedAt returns the value of UpdatedAt.
 func (s *Submission) GetUpdatedAt() int64 {
 	return s.UpdatedAt
 }
 // GetSubmitter returns the value of Submitter.
 func (s *Submission) GetSubmitter() int64 {
 	return s.Submitter
 }
 // GetAssetID returns the value of AssetID.
 func (s *Submission) GetAssetID() int64 {
 	return s.AssetID
 }
 // GetAssetVersion returns the value of AssetVersion.
 func (s *Submission) GetAssetVersion() int64 {
 	return s.AssetVersion
 }
 // GetCompleted returns the value of Completed.
 func (s *Submission) GetCompleted() bool {
 	return s.Completed
 }
 // GetSubmissionType returns the value of SubmissionType.
 func (s *Submission) GetSubmissionType() int32 {
 	return s.SubmissionType
 }
 // GetTargetAssetID returns the value of TargetAssetID.
 func (s *Submission) GetTargetAssetID() OptInt64 {
 	return s.TargetAssetID
 }
 // GetStatusID returns the value of StatusID.
 func (s *Submission) GetStatusID() int32 {
 	return s.StatusID
 }
 // SetID sets the value of ID.
 func (s *Submission) SetID(val int64) {
 	s.ID = val
 }
 // SetDisplayName sets the value of DisplayName.
 func (s *Submission) SetDisplayName(val string) {
 	s.DisplayName = val
 }
 // SetCreator sets the value of Creator.
 func (s *Submission) SetCreator(val string) {
 	s.Creator = val
 }
 // SetGameID sets the value of GameID.
 func (s *Submission) SetGameID(val int32) {
 	s.GameID = val
 }
 // SetCreatedAt sets the value of CreatedAt.
 func (s *Submission) SetCreatedAt(val int64) {
 	s.CreatedAt = val
 }
 // SetUpdatedAt sets the value of UpdatedAt.
 func (s *Submission) SetUpdatedAt(val int64) {
 	s.UpdatedAt = val
 }
 // SetSubmitter sets the value of Submitter.
 func (s *Submission) SetSubmitter(val int64) {
 	s.Submitter = val
 }
 // SetAssetID sets the value of AssetID.
 func (s *Submission) SetAssetID(val int64) {
 	s.AssetID = val
 }
 // SetAssetVersion sets the value of AssetVersion.
 func (s *Submission) SetAssetVersion(val int64) {
 	s.AssetVersion = val
 }
 // SetCompleted sets the value of Completed.
 func (s *Submission) SetCompleted(val bool) {
 	s.Completed = val
 }
 // SetSubmissionType sets the value of SubmissionType.
 func (s *Submission) SetSubmissionType(val int32) {
 	s.SubmissionType = val
 }
 // SetTargetAssetID sets the value of TargetAssetID.
 func (s *Submission) SetTargetAssetID(val OptInt64) {
 	s.TargetAssetID = val
 }
 // SetStatusID sets the value of StatusID.
 func (s *Submission) SetStatusID(val int32) {
 	s.StatusID = val
 }
 // Ref: #/components/schemas/SubmissionCreate
 type SubmissionCreate struct {
 	DisplayName   string   `json:"DisplayName"`
 	Creator       string   `json:"Creator"`
 	GameID        int32    `json:"GameID"`
 	AssetID       int64    `json:"AssetID"`
 	AssetVersion  int64    `json:"AssetVersion"`
 	TargetAssetID OptInt64 `json:"TargetAssetID"`
 }
 // GetDisplayName returns the value of DisplayName.
 func (s *SubmissionCreate) GetDisplayName() string {
 	return s.DisplayName
 }
 // GetCreator returns the value of Creator.
 func (s *SubmissionCreate) GetCreator() string {
 	return s.Creator
 }
 // GetGameID returns the value of GameID.
 func (s *SubmissionCreate) GetGameID() int32 {
 	return s.GameID
 }
 // GetAssetID returns the value of AssetID.
 func (s *SubmissionCreate) GetAssetID() int64 {
 	return s.AssetID
 }
 // GetAssetVersion returns the value of AssetVersion.
 func (s *SubmissionCreate) GetAssetVersion() int64 {
 	return s.AssetVersion
 }
 // GetTargetAssetID returns the value of TargetAssetID.
 func (s *SubmissionCreate) GetTargetAssetID() OptInt64 {
 	return s.TargetAssetID
 }
 // SetDisplayName sets the value of DisplayName.
 func (s *SubmissionCreate) SetDisplayName(val string) {
 	s.DisplayName = val
 }
 // SetCreator sets the value of Creator.
 func (s *SubmissionCreate) SetCreator(val string) {
 	s.Creator = val
 }
 // SetGameID sets the value of GameID.
 func (s *SubmissionCreate) SetGameID(val int32) {
 	s.GameID = val
 }
 // SetAssetID sets the value of AssetID.
 func (s *SubmissionCreate) SetAssetID(val int64) {
 	s.AssetID = val
 }
 // SetAssetVersion sets the value of AssetVersion.
 func (s *SubmissionCreate) SetAssetVersion(val int64) {
 	s.AssetVersion = val
 }
 // SetTargetAssetID sets the value of TargetAssetID.
 func (s *SubmissionCreate) SetTargetAssetID(val OptInt64) {
 	s.TargetAssetID = val
 }
 // Ref: #/components/schemas/SubmissionFilter
 type SubmissionFilter struct {
 	ID          int64     `json:"ID"`
 	DisplayName OptString `json:"DisplayName"`
 	Creator     OptString `json:"Creator"`
 	GameID      OptInt32  `json:"GameID"`
 }
 // GetID returns the value of ID.
 func (s *SubmissionFilter) GetID() int64 {
 	return s.ID
 }
 // GetDisplayName returns the value of DisplayName.
 func (s *SubmissionFilter) GetDisplayName() OptString {
 	return s.DisplayName
 }
 // GetCreator returns the value of Creator.
 func (s *SubmissionFilter) GetCreator() OptString {
 	return s.Creator
 }
 // GetGameID returns the value of GameID.
 func (s *SubmissionFilter) GetGameID() OptInt32 {
 	return s.GameID
 }
 // SetID sets the value of ID.
 func (s *SubmissionFilter) SetID(val int64) {
 	s.ID = val
 }
 // SetDisplayName sets the value of DisplayName.
 func (s *SubmissionFilter) SetDisplayName(val OptString) {
 	s.DisplayName = val
 }
 // SetCreator sets the value of Creator.
 func (s *SubmissionFilter) SetCreator(val OptString) {
 	s.Creator = val
 }
 // SetGameID sets the value of GameID.
 func (s *SubmissionFilter) SetGameID(val OptInt32) {
 	s.GameID = val
 }
 // UpdateScriptNoContent is response for UpdateScript operation.
 type UpdateScriptNoContent struct{}
 // UpdateScriptPolicyNoContent is response for UpdateScriptPolicy operation.
 type UpdateScriptPolicyNoContent struct{}
 // UpdateSubmissionModelNoContent is response for UpdateSubmissionModel operation.
 type UpdateSubmissionModelNoContent struct{}
--- a/pkg/api/oas_security_gen.go
+++ b/pkg/api/oas_security_gen.go
@ -0,0 +1,74 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 	"net/http"
 	"strings"
 	"github.com/go-faster/errors"
 	"github.com/ogen-go/ogen/ogenerrors"
 )
 // SecurityHandler is handler for security parameters.
 type SecurityHandler interface {
 	// HandleCookieAuth handles cookieAuth security.
 	HandleCookieAuth(ctx context.Context, operationName OperationName, t CookieAuth) (context.Context, error)
 }
 func findAuthorization(h http.Header, prefix string) (string, bool) {
 	v, ok := h["Authorization"]
 	if !ok {
 		return "", false
 	}
 	for _, vv := range v {
 		scheme, value, ok := strings.Cut(vv, " ")
 		if !ok || !strings.EqualFold(scheme, prefix) {
 			continue
 		}
 		return value, true
 	}
 	return "", false
 }
 func (s *Server) securityCookieAuth(ctx context.Context, operationName OperationName, req *http.Request) (context.Context, bool, error) {
 	var t CookieAuth
 	const parameterName = "session_id"
 	var value string
 	switch cookie, err := req.Cookie(parameterName); {
 	case err == nil: // if NO error
 		value = cookie.Value
 	case errors.Is(err, http.ErrNoCookie):
 		return ctx, false, nil
 	default:
 		return nil, false, errors.Wrap(err, "get cookie value")
 	}
 	t.APIKey = value
 	rctx, err := s.sec.HandleCookieAuth(ctx, operationName, t)
 	if errors.Is(err, ogenerrors.ErrSkipServerSecurity) {
 		return nil, false, nil
 	} else if err != nil {
 		return nil, false, err
 	}
 	return rctx, true, err
 }
 // SecuritySource is provider of security values (tokens, passwords, etc.).
 type SecuritySource interface {
 	// CookieAuth provides cookieAuth security value.
 	CookieAuth(ctx context.Context, operationName OperationName) (CookieAuth, error)
 }
 func (s *Client) securityCookieAuth(ctx context.Context, operationName OperationName, req *http.Request) error {
 	t, err := s.sec.CookieAuth(ctx, operationName)
 	if err != nil {
 		return errors.Wrap(err, "security source \"CookieAuth\"")
 	}
 	req.AddCookie(&http.Cookie{
 		Name:  "session_id",
 		Value: t.APIKey,
 	})
 	return nil
 }
--- a/pkg/api/oas_server_gen.go
+++ b/pkg/api/oas_server_gen.go
@ -0,0 +1,168 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 )
 // Handler handles operations described by OpenAPI v3 specification.
 type Handler interface {
 	// ActionSubmissionPublish implements actionSubmissionPublish operation.
 	//
 	// (Internal endpoint) Role Validator changes status from Publishing -> Published.
 	//
 	// POST /submissions/{SubmissionID}/status/validator-published
 	ActionSubmissionPublish(ctx context.Context, params ActionSubmissionPublishParams) error
 	// ActionSubmissionReject implements actionSubmissionReject operation.
 	//
 	// Role Reviewer changes status from Submitted -> Rejected.
 	//
 	// POST /submissions/{SubmissionID}/status/reject
 	ActionSubmissionReject(ctx context.Context, params ActionSubmissionRejectParams) error
 	// ActionSubmissionRequestChanges implements actionSubmissionRequestChanges operation.
 	//
 	// Role Reviewer changes status from Validated|Accepted|Submitted -> ChangesRequested.
 	//
 	// POST /submissions/{SubmissionID}/status/request-changes
 	ActionSubmissionRequestChanges(ctx context.Context, params ActionSubmissionRequestChangesParams) error
 	// ActionSubmissionRevoke implements actionSubmissionRevoke operation.
 	//
 	// Role Submitter changes status from Submitted|ChangesRequested -> UnderConstruction.
 	//
 	// POST /submissions/{SubmissionID}/status/revoke
 	ActionSubmissionRevoke(ctx context.Context, params ActionSubmissionRevokeParams) error
 	// ActionSubmissionSubmit implements actionSubmissionSubmit operation.
 	//
 	// Role Submitter changes status from UnderConstruction|ChangesRequested -> Submitted.
 	//
 	// POST /submissions/{SubmissionID}/status/submit
 	ActionSubmissionSubmit(ctx context.Context, params ActionSubmissionSubmitParams) error
 	// ActionSubmissionTriggerPublish implements actionSubmissionTriggerPublish operation.
 	//
 	// Role Admin changes status from Validated -> Publishing.
 	//
 	// POST /submissions/{SubmissionID}/status/trigger-publish
 	ActionSubmissionTriggerPublish(ctx context.Context, params ActionSubmissionTriggerPublishParams) error
 	// ActionSubmissionTriggerValidate implements actionSubmissionTriggerValidate operation.
 	//
 	// Role Reviewer triggers validation and changes status from Submitted|Accepted -> Validating.
 	//
 	// POST /submissions/{SubmissionID}/status/trigger-validate
 	ActionSubmissionTriggerValidate(ctx context.Context, params ActionSubmissionTriggerValidateParams) error
 	// ActionSubmissionValidate implements actionSubmissionValidate operation.
 	//
 	// (Internal endpoint) Role Validator changes status from Validating -> Validated.
 	//
 	// POST /submissions/{SubmissionID}/status/validator-validated
 	ActionSubmissionValidate(ctx context.Context, params ActionSubmissionValidateParams) error
 	// CreateScript implements createScript operation.
 	//
 	// Create a new script.
 	//
 	// POST /scripts
 	CreateScript(ctx context.Context, req *ScriptCreate) (*ID, error)
 	// CreateScriptPolicy implements createScriptPolicy operation.
 	//
 	// Create a new script policy.
 	//
 	// POST /script-policy
 	CreateScriptPolicy(ctx context.Context, req *ScriptPolicyCreate) (*ID, error)
 	// CreateSubmission implements createSubmission operation.
 	//
 	// Create new submission.
 	//
 	// POST /submissions
 	CreateSubmission(ctx context.Context, req *SubmissionCreate) (*ID, error)
 	// DeleteScript implements deleteScript operation.
 	//
 	// Delete the specified script by ID.
 	//
 	// DELETE /scripts/{ScriptID}
 	DeleteScript(ctx context.Context, params DeleteScriptParams) error
 	// DeleteScriptPolicy implements deleteScriptPolicy operation.
 	//
 	// Delete the specified script policy by ID.
 	//
 	// DELETE /script-policy/id/{ScriptPolicyID}
 	DeleteScriptPolicy(ctx context.Context, params DeleteScriptPolicyParams) error
 	// GetScript implements getScript operation.
 	//
 	// Get the specified script by ID.
 	//
 	// GET /scripts/{ScriptID}
 	GetScript(ctx context.Context, params GetScriptParams) (*Script, error)
 	// GetScriptPolicy implements getScriptPolicy operation.
 	//
 	// Get the specified script policy by ID.
 	//
 	// GET /script-policy/id/{ScriptPolicyID}
 	GetScriptPolicy(ctx context.Context, params GetScriptPolicyParams) (*ScriptPolicy, error)
 	// GetScriptPolicyFromHash implements getScriptPolicyFromHash operation.
 	//
 	// Get the policy for the given hash of script source code.
 	//
 	// GET /script-policy/hash/{FromScriptHash}
 	GetScriptPolicyFromHash(ctx context.Context, params GetScriptPolicyFromHashParams) (*ScriptPolicy, error)
 	// GetSubmission implements getSubmission operation.
 	//
 	// Retrieve map with ID.
 	//
 	// GET /submissions/{SubmissionID}
 	GetSubmission(ctx context.Context, params GetSubmissionParams) (*Submission, error)
 	// ListSubmissions implements listSubmissions operation.
 	//
 	// Get list of submissions.
 	//
 	// GET /submissions
 	ListSubmissions(ctx context.Context, params ListSubmissionsParams) ([]Submission, error)
 	// SetSubmissionCompleted implements setSubmissionCompleted operation.
 	//
 	// Retrieve map with ID.
 	//
 	// POST /submissions/{SubmissionID}/completed
 	SetSubmissionCompleted(ctx context.Context, params SetSubmissionCompletedParams) error
 	// UpdateScript implements updateScript operation.
 	//
 	// Update the specified script by ID.
 	//
 	// POST /scripts/{ScriptID}
 	UpdateScript(ctx context.Context, req *ScriptUpdate, params UpdateScriptParams) error
 	// UpdateScriptPolicy implements updateScriptPolicy operation.
 	//
 	// Update the specified script policy by ID.
 	//
 	// POST /script-policy/id/{ScriptPolicyID}
 	UpdateScriptPolicy(ctx context.Context, req *ScriptPolicyUpdate, params UpdateScriptPolicyParams) error
 	// UpdateSubmissionModel implements updateSubmissionModel operation.
 	//
 	// Update model following role restrictions.
 	//
 	// POST /submissions/{SubmissionID}/model
 	UpdateSubmissionModel(ctx context.Context, params UpdateSubmissionModelParams) error
 	// NewError creates *ErrorStatusCode from error returned by handler.
 	//
 	// Used for common default response.
 	NewError(ctx context.Context, err error) *ErrorStatusCode
 }
 // Server implements http server based on OpenAPI v3 specification and
 // calls Handler to handle requests.
 type Server struct {
 	h   Handler
 	sec SecurityHandler
 	baseServer
 }
 // NewServer creates new Server.
 func NewServer(h Handler, sec SecurityHandler, opts ...ServerOption) (*Server, error) {
 	s, err := newServerConfig(opts...).baseServer()
 	if err != nil {
 		return nil, err
 	}
 	return &Server{
 		h:          h,
 		sec:        sec,
 		baseServer: s,
 	}, nil
 }
--- a/pkg/api/oas_unimplemented_gen.go
+++ b/pkg/api/oas_unimplemented_gen.go
@ -0,0 +1,220 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"context"
 	ht "github.com/ogen-go/ogen/http"
 )
 // UnimplementedHandler is no-op Handler which returns http.ErrNotImplemented.
 type UnimplementedHandler struct{}
 var _ Handler = UnimplementedHandler{}
 // ActionSubmissionPublish implements actionSubmissionPublish operation.
 //
 // (Internal endpoint) Role Validator changes status from Publishing -> Published.
 //
 // POST /submissions/{SubmissionID}/status/validator-published
 func (UnimplementedHandler) ActionSubmissionPublish(ctx context.Context, params ActionSubmissionPublishParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionReject implements actionSubmissionReject operation.
 //
 // Role Reviewer changes status from Submitted -> Rejected.
 //
 // POST /submissions/{SubmissionID}/status/reject
 func (UnimplementedHandler) ActionSubmissionReject(ctx context.Context, params ActionSubmissionRejectParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionRequestChanges implements actionSubmissionRequestChanges operation.
 //
 // Role Reviewer changes status from Validated|Accepted|Submitted -> ChangesRequested.
 //
 // POST /submissions/{SubmissionID}/status/request-changes
 func (UnimplementedHandler) ActionSubmissionRequestChanges(ctx context.Context, params ActionSubmissionRequestChangesParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionRevoke implements actionSubmissionRevoke operation.
 //
 // Role Submitter changes status from Submitted|ChangesRequested -> UnderConstruction.
 //
 // POST /submissions/{SubmissionID}/status/revoke
 func (UnimplementedHandler) ActionSubmissionRevoke(ctx context.Context, params ActionSubmissionRevokeParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionSubmit implements actionSubmissionSubmit operation.
 //
 // Role Submitter changes status from UnderConstruction|ChangesRequested -> Submitted.
 //
 // POST /submissions/{SubmissionID}/status/submit
 func (UnimplementedHandler) ActionSubmissionSubmit(ctx context.Context, params ActionSubmissionSubmitParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionTriggerPublish implements actionSubmissionTriggerPublish operation.
 //
 // Role Admin changes status from Validated -> Publishing.
 //
 // POST /submissions/{SubmissionID}/status/trigger-publish
 func (UnimplementedHandler) ActionSubmissionTriggerPublish(ctx context.Context, params ActionSubmissionTriggerPublishParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionTriggerValidate implements actionSubmissionTriggerValidate operation.
 //
 // Role Reviewer triggers validation and changes status from Submitted|Accepted -> Validating.
 //
 // POST /submissions/{SubmissionID}/status/trigger-validate
 func (UnimplementedHandler) ActionSubmissionTriggerValidate(ctx context.Context, params ActionSubmissionTriggerValidateParams) error {
 	return ht.ErrNotImplemented
 }
 // ActionSubmissionValidate implements actionSubmissionValidate operation.
 //
 // (Internal endpoint) Role Validator changes status from Validating -> Validated.
 //
 // POST /submissions/{SubmissionID}/status/validator-validated
 func (UnimplementedHandler) ActionSubmissionValidate(ctx context.Context, params ActionSubmissionValidateParams) error {
 	return ht.ErrNotImplemented
 }
 // CreateScript implements createScript operation.
 //
 // Create a new script.
 //
 // POST /scripts
 func (UnimplementedHandler) CreateScript(ctx context.Context, req *ScriptCreate) (r *ID, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // CreateScriptPolicy implements createScriptPolicy operation.
 //
 // Create a new script policy.
 //
 // POST /script-policy
 func (UnimplementedHandler) CreateScriptPolicy(ctx context.Context, req *ScriptPolicyCreate) (r *ID, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // CreateSubmission implements createSubmission operation.
 //
 // Create new submission.
 //
 // POST /submissions
 func (UnimplementedHandler) CreateSubmission(ctx context.Context, req *SubmissionCreate) (r *ID, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // DeleteScript implements deleteScript operation.
 //
 // Delete the specified script by ID.
 //
 // DELETE /scripts/{ScriptID}
 func (UnimplementedHandler) DeleteScript(ctx context.Context, params DeleteScriptParams) error {
 	return ht.ErrNotImplemented
 }
 // DeleteScriptPolicy implements deleteScriptPolicy operation.
 //
 // Delete the specified script policy by ID.
 //
 // DELETE /script-policy/id/{ScriptPolicyID}
 func (UnimplementedHandler) DeleteScriptPolicy(ctx context.Context, params DeleteScriptPolicyParams) error {
 	return ht.ErrNotImplemented
 }
 // GetScript implements getScript operation.
 //
 // Get the specified script by ID.
 //
 // GET /scripts/{ScriptID}
 func (UnimplementedHandler) GetScript(ctx context.Context, params GetScriptParams) (r *Script, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // GetScriptPolicy implements getScriptPolicy operation.
 //
 // Get the specified script policy by ID.
 //
 // GET /script-policy/id/{ScriptPolicyID}
 func (UnimplementedHandler) GetScriptPolicy(ctx context.Context, params GetScriptPolicyParams) (r *ScriptPolicy, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // GetScriptPolicyFromHash implements getScriptPolicyFromHash operation.
 //
 // Get the policy for the given hash of script source code.
 //
 // GET /script-policy/hash/{FromScriptHash}
 func (UnimplementedHandler) GetScriptPolicyFromHash(ctx context.Context, params GetScriptPolicyFromHashParams) (r *ScriptPolicy, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // GetSubmission implements getSubmission operation.
 //
 // Retrieve map with ID.
 //
 // GET /submissions/{SubmissionID}
 func (UnimplementedHandler) GetSubmission(ctx context.Context, params GetSubmissionParams) (r *Submission, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // ListSubmissions implements listSubmissions operation.
 //
 // Get list of submissions.
 //
 // GET /submissions
 func (UnimplementedHandler) ListSubmissions(ctx context.Context, params ListSubmissionsParams) (r []Submission, _ error) {
 	return r, ht.ErrNotImplemented
 }
 // SetSubmissionCompleted implements setSubmissionCompleted operation.
 //
 // Retrieve map with ID.
 //
 // POST /submissions/{SubmissionID}/completed
 func (UnimplementedHandler) SetSubmissionCompleted(ctx context.Context, params SetSubmissionCompletedParams) error {
 	return ht.ErrNotImplemented
 }
 // UpdateScript implements updateScript operation.
 //
 // Update the specified script by ID.
 //
 // POST /scripts/{ScriptID}
 func (UnimplementedHandler) UpdateScript(ctx context.Context, req *ScriptUpdate, params UpdateScriptParams) error {
 	return ht.ErrNotImplemented
 }
 // UpdateScriptPolicy implements updateScriptPolicy operation.
 //
 // Update the specified script policy by ID.
 //
 // POST /script-policy/id/{ScriptPolicyID}
 func (UnimplementedHandler) UpdateScriptPolicy(ctx context.Context, req *ScriptPolicyUpdate, params UpdateScriptPolicyParams) error {
 	return ht.ErrNotImplemented
 }
 // UpdateSubmissionModel implements updateSubmissionModel operation.
 //
 // Update model following role restrictions.
 //
 // POST /submissions/{SubmissionID}/model
 func (UnimplementedHandler) UpdateSubmissionModel(ctx context.Context, params UpdateSubmissionModelParams) error {
 	return ht.ErrNotImplemented
 }
 // NewError creates *ErrorStatusCode from error returned by handler.
 //
 // Used for common default response.
 func (UnimplementedHandler) NewError(ctx context.Context, err error) (r *ErrorStatusCode) {
 	r = new(ErrorStatusCode)
 	return r
 }
--- a/pkg/api/oas_uri_gen.go
+++ b/pkg/api/oas_uri_gen.go
@ -124,10 +124,7 @@ func (s *Pagination) DecodeURI(d uri.Decoder) error {
 // EncodeURI encodes SubmissionFilter as URI form.
 func (s *SubmissionFilter) EncodeURI(e uri.Encoder) error {
 	if err := e.EncodeField("ID", func(e uri.Encoder) error {
-		if val, ok := s.ID.Get(); ok {
+		return e.EncodeValue(conv.Int64ToString(s.ID))
 			return e.EncodeValue(conv.Int64ToString(val))
 		}
 		return nil
 	}); err != nil {
 		return errors.Wrap(err, "encode field \"ID\"")
 	}
@ -155,23 +152,14 @@ func (s *SubmissionFilter) EncodeURI(e uri.Encoder) error {
 	}); err != nil {
 		return errors.Wrap(err, "encode field \"GameID\"")
 	}
 	if err := e.EncodeField("Date", func(e uri.Encoder) error {
 		if val, ok := s.Date.Get(); ok {
 			return e.EncodeValue(conv.Int64ToString(val))
 		}
 		return nil
 	}); err != nil {
 		return errors.Wrap(err, "encode field \"Date\"")
 	}
 	return nil
 }
-var uriFieldsNameOfSubmissionFilter = [5]string{
+var uriFieldsNameOfSubmissionFilter = [4]string{
 	0: "ID",
 	1: "DisplayName",
 	2: "Creator",
 	3: "GameID",
 	4: "Date",
 }
 // DecodeURI decodes SubmissionFilter from URI form.
@ -179,29 +167,24 @@ func (s *SubmissionFilter) DecodeURI(d uri.Decoder) error {
 	if s == nil {
 		return errors.New("invalid: unable to decode SubmissionFilter to nil")
 	}
 	var requiredBitSet [1]uint8
 	if err := d.DecodeFields(func(k string, d uri.Decoder) error {
 		switch k {
 		case "ID":
 			requiredBitSet[0] |= 1 << 0
 			if err := func() error {
-				var sDotIDVal int64
+				val, err := d.DecodeValue()
-				if err := func() error {
+				if err != nil {
 					val, err := d.DecodeValue()
 					if err != nil {
 						return err
 					}
 					c, err := conv.ToInt64(val)
 					if err != nil {
 						return err
 					}
 					sDotIDVal = c
 					return nil
 				}(); err != nil {
 					return err
 				}
-				s.ID.SetTo(sDotIDVal)
+
 				c, err := conv.ToInt64(val)
 				if err != nil {
 					return err
 				}
 				s.ID = c
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"ID\"")
@ -278,30 +261,6 @@ func (s *SubmissionFilter) DecodeURI(d uri.Decoder) error {
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"GameID\"")
 			}
 		case "Date":
 			if err := func() error {
 				var sDotDateVal int64
 				if err := func() error {
 					val, err := d.DecodeValue()
 					if err != nil {
 						return err
 					}
 					c, err := conv.ToInt64(val)
 					if err != nil {
 						return err
 					}
 					sDotDateVal = c
 					return nil
 				}(); err != nil {
 					return err
 				}
 				s.Date.SetTo(sDotDateVal)
 				return nil
 			}(); err != nil {
 				return errors.Wrap(err, "decode field \"Date\"")
 			}
 		default:
 			return nil
 		}
@ -309,6 +268,38 @@ func (s *SubmissionFilter) DecodeURI(d uri.Decoder) error {
 	}); err != nil {
 		return errors.Wrap(err, "decode SubmissionFilter")
 	}
 	// Validate required fields.
 	var failures []validate.FieldError
 	for i, mask := range [1]uint8{
 		0b00000001,
 	} {
 		if result := (requiredBitSet[i] & mask) ^ mask; result != 0 {
 			// Mask only required fields and check equality to mask using XOR.
 			//
 			// If XOR result is not zero, result is not equal to expected, so some fields are missed.
 			// Bits of fields which would be set are actually bits of missed fields.
 			missed := bits.OnesCount8(result)
 			for bitN := 0; bitN < missed; bitN++ {
 				bitIdx := bits.TrailingZeros8(result)
 				fieldIdx := i*8 + bitIdx
 				var name string
 				if fieldIdx < len(uriFieldsNameOfSubmissionFilter) {
 					name = uriFieldsNameOfSubmissionFilter[fieldIdx]
 				} else {
 					name = strconv.Itoa(fieldIdx)
 				}
 				failures = append(failures, validate.FieldError{
 					Name:  name,
 					Error: validate.ErrFieldRequired,
 				})
 				// Reset bit.
 				result &^= 1 << bitIdx
 			}
 		}
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
--- a/pkg/api/oas_validators_gen.go
+++ b/pkg/api/oas_validators_gen.go
@ -0,0 +1,375 @@
 // Code generated by ogen, DO NOT EDIT.
 package api
 import (
 	"github.com/go-faster/errors"
 	"github.com/ogen-go/ogen/validate"
 )
 func (s *Pagination) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.Int{
 			MinSet:        true,
 			Min:           1,
 			MaxSet:        false,
 			Max:           0,
 			MinExclusive:  false,
 			MaxExclusive:  false,
 			MultipleOfSet: false,
 			MultipleOf:    0,
 		}).Validate(int64(s.Page)); err != nil {
 			return errors.Wrap(err, "int")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Page",
 			Error: err,
 		})
 	}
 	if err := func() error {
 		if err := (validate.Int{
 			MinSet:        true,
 			Min:           1,
 			MaxSet:        true,
 			Max:           100,
 			MinExclusive:  false,
 			MaxExclusive:  false,
 			MultipleOfSet: false,
 			MultipleOf:    0,
 		}).Validate(int64(s.Limit)); err != nil {
 			return errors.Wrap(err, "int")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Limit",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *Script) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    16,
 			MinLengthSet: true,
 			MaxLength:    16,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.Hash)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Hash",
 			Error: err,
 		})
 	}
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    0,
 			MinLengthSet: false,
 			MaxLength:    1048576,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.Source)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Source",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *ScriptCreate) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    0,
 			MinLengthSet: false,
 			MaxLength:    1048576,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.Source)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Source",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *ScriptPolicy) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    16,
 			MinLengthSet: true,
 			MaxLength:    16,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.FromScriptHash)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "FromScriptHash",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *ScriptUpdate) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if value, ok := s.Source.Get(); ok {
 			if err := func() error {
 				if err := (validate.String{
 					MinLength:    0,
 					MinLengthSet: false,
 					MaxLength:    1048576,
 					MaxLengthSet: true,
 					Email:        false,
 					Hostname:     false,
 					Regex:        nil,
 				}).Validate(string(value)); err != nil {
 					return errors.Wrap(err, "string")
 				}
 				return nil
 			}(); err != nil {
 				return err
 			}
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Source",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *Submission) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    0,
 			MinLengthSet: false,
 			MaxLength:    128,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.DisplayName)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "DisplayName",
 			Error: err,
 		})
 	}
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    0,
 			MinLengthSet: false,
 			MaxLength:    128,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.Creator)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Creator",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *SubmissionCreate) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    0,
 			MinLengthSet: false,
 			MaxLength:    128,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.DisplayName)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "DisplayName",
 			Error: err,
 		})
 	}
 	if err := func() error {
 		if err := (validate.String{
 			MinLength:    0,
 			MinLengthSet: false,
 			MaxLength:    128,
 			MaxLengthSet: true,
 			Email:        false,
 			Hostname:     false,
 			Regex:        nil,
 		}).Validate(string(s.Creator)); err != nil {
 			return errors.Wrap(err, "string")
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Creator",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
 func (s *SubmissionFilter) Validate() error {
 	if s == nil {
 		return validate.ErrNilPointer
 	}
 	var failures []validate.FieldError
 	if err := func() error {
 		if value, ok := s.DisplayName.Get(); ok {
 			if err := func() error {
 				if err := (validate.String{
 					MinLength:    0,
 					MinLengthSet: false,
 					MaxLength:    128,
 					MaxLengthSet: true,
 					Email:        false,
 					Hostname:     false,
 					Regex:        nil,
 				}).Validate(string(value)); err != nil {
 					return errors.Wrap(err, "string")
 				}
 				return nil
 			}(); err != nil {
 				return err
 			}
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "DisplayName",
 			Error: err,
 		})
 	}
 	if err := func() error {
 		if value, ok := s.Creator.Get(); ok {
 			if err := func() error {
 				if err := (validate.String{
 					MinLength:    0,
 					MinLengthSet: false,
 					MaxLength:    128,
 					MaxLengthSet: true,
 					Email:        false,
 					Hostname:     false,
 					Regex:        nil,
 				}).Validate(string(value)); err != nil {
 					return errors.Wrap(err, "string")
 				}
 				return nil
 			}(); err != nil {
 				return err
 			}
 		}
 		return nil
 	}(); err != nil {
 		failures = append(failures, validate.FieldError{
 			Name:  "Creator",
 			Error: err,
 		})
 	}
 	if len(failures) > 0 {
 		return &validate.Error{Fields: failures}
 	}
 	return nil
 }
--- a/pkg/cmds/root.go
+++ b/pkg/cmds/root.go
@ -0,0 +1,37 @@
 package cmds
 import (
 	log "github.com/sirupsen/logrus"
 	"github.com/urfave/cli/v2"
 	"os"
 	"path/filepath"
 )
 var (
 	appName    = filepath.Base(os.Args[0])
 	commonFlag = []cli.Flag{
 		&cli.BoolFlag{
 			Name:  "debug",
 			Usage: "Enable debug logging",
 			Value: false,
 			Action: func(ctx *cli.Context, debug bool) error {
 				log.Println("ran")
 				if debug {
 					log.SetLevel(log.DebugLevel)
 					log.SetFormatter(&log.TextFormatter{})
 					log.SetReportCaller(false)
 				}
 				return nil
 			},
 		},
 	}
 )
 func NewApp() *cli.App {
 	app := cli.NewApp()
 	app.Name = appName
 	app.Usage = "Maps API Service"
 	app.Flags = commonFlag
 	return app
 }
--- a/pkg/cmds/serve.go
+++ b/pkg/cmds/serve.go
@ -0,0 +1,123 @@
 package cmds
 import (
 	"fmt"
 	"git.itzana.me/strafesnet/go-grpc/auth"
 	"git.itzana.me/strafesnet/maps-service/pkg/api"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore/gormstore"
 	"git.itzana.me/strafesnet/maps-service/pkg/service"
 	"github.com/nats-io/nats.go"
 	log "github.com/sirupsen/logrus"
 	"github.com/urfave/cli/v2"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials/insecure"
 	"net/http"
 )
 func NewServeCommand() *cli.Command {
 	return &cli.Command{
 		Name:   "serve",
 		Usage:  "Run maps service",
 		Action: serve,
 		Flags: []cli.Flag{
 			&cli.StringFlag{
 				Name:     "pg-host",
 				Usage:    "Host of postgres database",
 				EnvVars:  []string{"PG_HOST"},
 				Required: true,
 			},
 			&cli.IntFlag{
 				Name:     "pg-port",
 				Usage:    "Port of postgres database",
 				EnvVars:  []string{"PG_PORT"},
 				Required: true,
 			},
 			&cli.StringFlag{
 				Name:     "pg-db",
 				Usage:    "Name of database to connect to",
 				EnvVars:  []string{"PG_DB"},
 				Required: true,
 			},
 			&cli.StringFlag{
 				Name:     "pg-user",
 				Usage:    "User to connect with",
 				EnvVars:  []string{"PG_USER"},
 				Required: true,
 			},
 			&cli.StringFlag{
 				Name:     "pg-password",
 				Usage:    "Password to connect with",
 				EnvVars:  []string{"PG_PASSWORD"},
 				Required: true,
 			},
 			&cli.BoolFlag{
 				Name:    "migrate",
 				Usage:   "Run database migrations",
 				Value:   true,
 				EnvVars: []string{"MIGRATE"},
 			},
 			&cli.IntFlag{
 				Name:    "port",
 				Usage:   "Port to listen on",
 				Value:   8080,
 				EnvVars: []string{"PORT"},
 			},
 			&cli.StringFlag{
 				Name:    "auth-rpc-host",
 				Usage:   "Host of auth rpc",
 				EnvVars: []string{"AUTH_RPC_HOST"},
 				Value:   "auth-service:8090",
 			},
 			&cli.StringFlag{
 				Name:    "nats-host",
 				Usage:   "Host of nats",
 				EnvVars: []string{"NATS_HOST"},
 				Value:   "nats:4222",
 			},
 		},
 	}
 }
 func serve(ctx *cli.Context) error {
 	db, err := gormstore.New(ctx)
 	if err != nil {
 		log.WithError(err).Fatal("failed to connect database")
 	}
 	nc, err := nats.Connect(ctx.String("nats-host"))
 	if err != nil {
 		log.WithError(err).Fatal("failed to connect nats")
 	}
 	js, err := nc.JetStream()
 	if err != nil {
 		log.WithError(err).Fatal("failed to start jetstream")
 	}
 	_, err = js.AddStream(&nats.StreamConfig{
 		Name:      "maptest",
 		Subjects:  []string{"maptest.>"},
 		Retention: nats.WorkQueuePolicy,
 	})
 	if err != nil {
 		log.WithError(err).Fatal("failed to add stream")
 	}
 	svc := &service.Service{
 		DB:   db,
 		Nats: js,
 	}
 	conn, err := grpc.Dial(ctx.String("auth-rpc-host"), grpc.WithTransportCredentials(insecure.NewCredentials()))
 	if err != nil {
 		log.Fatal(err)
 	}
 	sec := service.SecurityHandler{
 		Client: auth.NewAuthServiceClient(conn),
 	}
 	srv, err := api.NewServer(svc, sec, api.WithPathPrefix("/v1"))
 	if err != nil {
 		log.WithError(err).Fatal("failed to initialize api server")
 	}
 	return http.ListenAndServe(fmt.Sprintf(":%d", ctx.Int("port")), srv)
 }
--- a/pkg/datastore/datastore.go
+++ b/pkg/datastore/datastore.go
@ -0,0 +1,44 @@
 package datastore
 import (
 	"context"
 	"errors"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 )
 var (
 	ErrNotExist        = errors.New("resource does not exist")
 	ErroNoRowsAffected = errors.New("query did not affect any rows")
 )
 type Datastore interface {
 	Submissions() Submissions
 	Scripts() Scripts
 	ScriptPolicy() ScriptPolicy
 }
 type Submissions interface {
 	Get(ctx context.Context, id int64) (model.Submission, error)
 	GetList(ctx context.Context, id []int64) ([]model.Submission, error)
 	Create(ctx context.Context, smap model.Submission) (model.Submission, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	IfStatusThenUpdate(ctx context.Context, id int64, statuses []model.Status, values OptionalMap) error
 	IfStatusThenUpdateAndGet(ctx context.Context, id int64, statuses []model.Status, values OptionalMap) (model.Submission, error)
 	Delete(ctx context.Context, id int64) error
 	List(ctx context.Context, filters OptionalMap, page model.Page) ([]model.Submission, error)
 }
 type Scripts interface {
 	Get(ctx context.Context, id int64) (model.Script, error)
 	Create(ctx context.Context, smap model.Script) (model.Script, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	Delete(ctx context.Context, id int64) error
 }
 type ScriptPolicy interface {
 	Get(ctx context.Context, id int64) (model.ScriptPolicy, error)
 	GetFromHash(ctx context.Context, hash uint64) (model.ScriptPolicy, error)
 	Create(ctx context.Context, smap model.ScriptPolicy) (model.ScriptPolicy, error)
 	Update(ctx context.Context, id int64, values OptionalMap) error
 	Delete(ctx context.Context, id int64) error
 }
--- a/internal/datastore/filter.go
+++ b/internal/datastore/filter.go
--- a/pkg/datastore/gormstore/db.go
+++ b/pkg/datastore/gormstore/db.go
@ -0,0 +1,44 @@
 package gormstore
 import (
 	"fmt"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 	"git.itzana.me/strafesnet/utils/logger"
 	log "github.com/sirupsen/logrus"
 	"github.com/urfave/cli/v2"
 	"gorm.io/driver/postgres"
 	"gorm.io/gorm"
 )
 func New(ctx *cli.Context) (datastore.Datastore, error) {
 	db, err := gorm.Open(
 		postgres.Open(
 			fmt.Sprintf(
 				"host=%s user=%s password=%s dbname=%s port=%d",
 				ctx.String("pg-host"),
 				ctx.String("pg-user"),
 				ctx.String("pg-password"),
 				ctx.String("pg-db"),
 				ctx.Int("pg-port")),
 		), &gorm.Config{
 			Logger: logger.New(),
 		})
 	if err != nil {
 		log.WithError(err).Errorln("failed to connect to database")
 		return nil, err
 	}
 	if ctx.Bool("migrate") {
 		if err := db.AutoMigrate(
 			&model.Submission{},
 			&model.Script{},
 			&model.ScriptPolicy{},
 		); err != nil {
 			log.WithError(err).Errorln("database migration failed")
 			return nil, err
 		}
 	}
 	return &Gormstore{db}, nil
 }
--- a/pkg/datastore/gormstore/gormstore.go
+++ b/pkg/datastore/gormstore/gormstore.go
@ -0,0 +1,22 @@
 package gormstore
 import (
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"gorm.io/gorm"
 )
 type Gormstore struct {
 	db *gorm.DB
 }
 func (g Gormstore) Submissions() datastore.Submissions {
 	return &Submissions{db: g.db}
 }
 func (g Gormstore) Scripts() datastore.Scripts {
 	return &Scripts{db: g.db}
 }
 func (g Gormstore) ScriptPolicy() datastore.ScriptPolicy {
 	return &ScriptPolicy{db: g.db}
 }
--- a/pkg/datastore/gormstore/script_policy.go
+++ b/pkg/datastore/gormstore/script_policy.go
@ -0,0 +1,64 @@
 package gormstore
 import (
 	"context"
 	"errors"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 	"gorm.io/gorm"
 )
 type ScriptPolicy struct {
 	db *gorm.DB
 }
 func (env *ScriptPolicy) Get(ctx context.Context, id int64) (model.ScriptPolicy, error) {
 	var mdl model.ScriptPolicy
 	if err := env.db.First(&mdl, id).Error; err != nil {
 		if errors.Is(err, gorm.ErrRecordNotFound) {
 			return mdl, datastore.ErrNotExist
 		}
 	}
 	return mdl, nil
 }
 func (env *ScriptPolicy) GetFromHash(ctx context.Context, hash uint64) (model.ScriptPolicy, error) {
 	var mdl model.ScriptPolicy
 	if err := env.db.Model(&model.ScriptPolicy{}).Where("hash = ?", hash).Error; err != nil {
 		if errors.Is(err, gorm.ErrRecordNotFound) {
 			return mdl, datastore.ErrNotExist
 		}
 	}
 	return mdl, nil
 }
 func (env *ScriptPolicy) Create(ctx context.Context, smap model.ScriptPolicy) (model.ScriptPolicy, error) {
 	if err := env.db.Create(&smap).Error; err != nil {
 		return smap, err
 	}
 	return smap, nil
 }
 func (env *ScriptPolicy) Update(ctx context.Context, id int64, values datastore.OptionalMap) error {
 	if err := env.db.Model(&model.ScriptPolicy{}).Where("id = ?", id).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (env *ScriptPolicy) Delete(ctx context.Context, id int64) error {
 	if err := env.db.Delete(&model.ScriptPolicy{}, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
--- a/pkg/datastore/gormstore/scripts.go
+++ b/pkg/datastore/gormstore/scripts.go
@ -0,0 +1,84 @@
 package gormstore
 import (
 	"context"
 	"errors"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 	"gorm.io/gorm"
 )
 type Scripts struct {
 	db *gorm.DB
 }
 func (env *Scripts) Get(ctx context.Context, id int64) (model.Script, error) {
 	var mdl model.Script
 	if err := env.db.First(&mdl, id).Error; err != nil {
 		if errors.Is(err, gorm.ErrRecordNotFound) {
 			return mdl, datastore.ErrNotExist
 		}
 	}
 	return mdl, nil
 }
 func (env *Scripts) GetList(ctx context.Context, id []int64) ([]model.Script, error) {
 	var mapList []model.Script
 	if err := env.db.Find(&mapList, "id IN ?", id).Error; err != nil {
 		return mapList, err
 	}
 	return mapList, nil
 }
 func (env *Scripts) Create(ctx context.Context, smap model.Script) (model.Script, error) {
 	if err := env.db.Create(&smap).Error; err != nil {
 		return smap, err
 	}
 	return smap, nil
 }
 func (env *Scripts) Update(ctx context.Context, id int64, values datastore.OptionalMap) error {
 	if err := env.db.Model(&model.Script{}).Where("id = ?", id).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 // the update can only occur if the status matches one of the provided values.
 func (env *Scripts) IfStatusThenUpdate(ctx context.Context, id int64, statuses []model.Status, values datastore.OptionalMap) error {
 	if err := env.db.Model(&model.Script{}).Where("id = ?", id).Where("status IN ?", statuses).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (env *Scripts) Delete(ctx context.Context, id int64) error {
 	if err := env.db.Delete(&model.Script{}, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (env *Scripts) List(ctx context.Context, filters datastore.OptionalMap, page model.Page) ([]model.Script, error) {
 	var maps []model.Script
 	if err := env.db.Where(filters.Map()).Offset(int((page.Number - 1) * page.Size)).Limit(int(page.Size)).Find(&maps).Error; err != nil {
 		return nil, err
 	}
 	return maps, nil
 }
--- a/pkg/datastore/gormstore/submissions.go
+++ b/pkg/datastore/gormstore/submissions.go
@ -0,0 +1,108 @@
 package gormstore
 import (
 	"context"
 	"errors"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 	"gorm.io/gorm"
 	"gorm.io/gorm/clause"
 )
 type Submissions struct {
 	db *gorm.DB
 }
 func (env *Submissions) Get(ctx context.Context, id int64) (model.Submission, error) {
 	var submission model.Submission
 	if err := env.db.First(&submission, id).Error; err != nil {
 		if errors.Is(err, gorm.ErrRecordNotFound) {
 			return submission, datastore.ErrNotExist
 		}
 	}
 	return submission, nil
 }
 func (env *Submissions) GetList(ctx context.Context, id []int64) ([]model.Submission, error) {
 	var mapList []model.Submission
 	if err := env.db.Find(&mapList, "id IN ?", id).Error; err != nil {
 		return mapList, err
 	}
 	return mapList, nil
 }
 func (env *Submissions) Create(ctx context.Context, smap model.Submission) (model.Submission, error) {
 	if err := env.db.Create(&smap).Error; err != nil {
 		return smap, err
 	}
 	return smap, nil
 }
 func (env *Submissions) Update(ctx context.Context, id int64, values datastore.OptionalMap) error {
 	if err := env.db.Model(&model.Submission{}).Where("id = ?", id).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 // the update can only occur if the status matches one of the provided values.
 func (env *Submissions) IfStatusThenUpdate(ctx context.Context, id int64, statuses []model.Status, values datastore.OptionalMap) error {
 	if err := env.db.Model(&model.Submission{}).Where("id = ?", id).Where("status_id IN ?", statuses).Updates(values.Map()).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 // the update can only occur if the status matches one of the provided values.
 // returns the updated value
 func (env *Submissions) IfStatusThenUpdateAndGet(ctx context.Context, id int64, statuses []model.Status, values datastore.OptionalMap) (model.Submission, error) {
 	var submission model.Submission
 	result := env.db.Model(&submission).
 		Clauses(clause.Returning{}).
 		Where("id = ?", id).
 		Where("status_id IN ?", statuses).
 		Updates(values.Map())
 	if result.Error != nil {
 		if result.Error == gorm.ErrRecordNotFound {
 			return submission, datastore.ErrNotExist
 		}
 		return submission, result.Error
 	}
 	if result.RowsAffected == 0 {
 		return submission, datastore.ErroNoRowsAffected
 	}
 	return submission, nil
 }
 func (env *Submissions) Delete(ctx context.Context, id int64) error {
 	if err := env.db.Delete(&model.Submission{}, id).Error; err != nil {
 		if err == gorm.ErrRecordNotFound {
 			return datastore.ErrNotExist
 		}
 		return err
 	}
 	return nil
 }
 func (env *Submissions) List(ctx context.Context, filters datastore.OptionalMap, page model.Page) ([]model.Submission, error) {
 	var maps []model.Submission
 	if err := env.db.Where(filters.Map()).Offset(int((page.Number - 1) * page.Size)).Limit(int(page.Size)).Find(&maps).Error; err != nil {
 		return nil, err
 	}
 	return maps, nil
 }
--- a/pkg/model/nats.go
+++ b/pkg/model/nats.go
@ -0,0 +1,32 @@
 package model
 // These represent the information needed in the nats message
 // to perform the operation, they are encoded to json
 // Requests are sent from maps-service to validator
 type ValidateRequest struct {
 	// submission_id is passed back in the response message
 	SubmissionID     int64
 	ModelID          uint64
 	ModelVersion     uint64
 	ValidatedModelID uint64 // optional value
 }
 // Create a new map
 type PublishNewRequest struct {
 	SubmissionID int64
 	ModelID      uint64
 	ModelVersion uint64
 	Creator      string
 	DisplayName  string
 	GameID       uint32
 	//games HashSet<GameID>
 }
 type PublishFixRequest struct {
 	SubmissionID  int64
 	ModelID       uint64
 	ModelVersion  uint64
 	TargetAssetID uint64
 }
--- a/internal/model/page.go
+++ b/internal/model/page.go
--- a/pkg/model/policy.go
+++ b/pkg/model/policy.go
@ -0,0 +1,27 @@
 package model
 import "time"
 type Policy int32
 const (
 	ScriptPolicyAllowed Policy = 0
 	ScriptPolicyBlocked Policy = 1
 	ScriptPolicyDelete  Policy = 2
 	ScriptPolicyReplace Policy = 3
 )
 type ScriptPolicy struct {
 	ID int64 `gorm:"primaryKey"`
 	// Hash of the source code that leads to this policy.
 	// If this is a replacement mapping, the original source may not be pointed to by any policy.
 	// The original source should still exist in the scripts table, which can be located by the same hash.
 	FromScriptHash uint64
 	// The ID of the replacement source (ScriptPolicyReplace)
 	// or verbatim source (ScriptPolicyAllowed)
 	// or 0 (other)
 	ToScriptID int64
 	Policy     Policy
 	CreatedAt  time.Time
 	UpdatedAt  time.Time
 }
--- a/pkg/model/script.go
+++ b/pkg/model/script.go
@ -0,0 +1,12 @@
 package model
 import "time"
 type Script struct {
 	ID           int64 `gorm:"primaryKey"`
 	Hash         uint64
 	Source       string
 	SubmissionID int64 // which submission did this script first appear in
 	CreatedAt    time.Time
 	UpdatedAt    time.Time
 }
--- a/pkg/model/submission.go
+++ b/pkg/model/submission.go
@ -0,0 +1,34 @@
 package model
 import "time"
 type Status int32
 const (
 	StatusPublished Status = 8
 	StatusRejected  Status = 7
 	StatusPublishing Status = 6
 	StatusValidated  Status = 5
 	StatusValidating Status = 4
 	StatusAccepted   Status = 3
 	StatusChangesRequested  Status = 2
 	StatusSubmitted         Status = 1
 	StatusUnderConstruction Status = 0
 )
 type Submission struct {
 	ID            int64 `gorm:"primaryKey"`
 	DisplayName   string
 	Creator       string
 	GameID        int32
 	CreatedAt     time.Time
 	UpdatedAt     time.Time
 	Submitter     uint64 // UserID
 	AssetID       uint64
 	AssetVersion  uint64
 	Completed     bool   // Has this version of the map been completed at least once on maptest
 	TargetAssetID uint64 // where to upload map fix.  if the TargetAssetID is 0, it's a new map.
 	StatusID      Status
 }
--- a/pkg/service/script_policy.go
+++ b/pkg/service/script_policy.go
@ -0,0 +1,156 @@
 package service
 import (
 	"context"
 	"fmt"
 	"strconv"
 	"git.itzana.me/strafesnet/maps-service/pkg/api"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 )
 // CreateScriptPolicy implements createScriptPolicy operation.
 //
 // Create a new script policy.
 //
 // POST /script-policy
 func (svc *Service) CreateScriptPolicy(ctx context.Context, req *api.ScriptPolicyCreate) (*api.ID, error) {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return nil, ErrUserInfo
 	}
 	if !userInfo.Roles.ScriptWrite {
 		return nil, ErrPermissionDenied
 	}
 	from_script, err := svc.DB.Scripts().Get(ctx, req.FromScriptID)
 	if err != nil {
 		return nil, err
 	}
 	// the existence of ToScriptID does not need to be validated because it's checked by a foreign key constraint.
 	script, err := svc.DB.ScriptPolicy().Create(ctx, model.ScriptPolicy{
 		ID:             0,
 		FromScriptHash: from_script.Hash,
 		ToScriptID:     req.ToScriptID,
 		Policy:         model.Policy(req.Policy),
 	})
 	if err != nil {
 		return nil, err
 	}
 	return &api.ID{
 		ID: script.ID,
 	}, nil
 }
 // DeleteScriptPolicy implements deleteScriptPolicy operation.
 //
 // Delete the specified script policy by ID.
 //
 // DELETE /script-policy/id/{ScriptPolicyID}
 func (svc *Service) DeleteScriptPolicy(ctx context.Context, params api.DeleteScriptPolicyParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	if !userInfo.Roles.ScriptWrite {
 		return ErrPermissionDenied
 	}
 	return svc.DB.ScriptPolicy().Delete(ctx, params.ScriptPolicyID)
 }
 // GetScriptPolicy implements getScriptPolicy operation.
 //
 // Get the specified script policy by ID.
 //
 // GET /script-policy/id/{ScriptPolicyID}
 func (svc *Service) GetScriptPolicy(ctx context.Context, params api.GetScriptPolicyParams) (*api.ScriptPolicy, error) {
 	_, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return nil, ErrUserInfo
 	}
 	// Read permission for script policy only requires you to be logged in
 	policy, err := svc.DB.ScriptPolicy().Get(ctx, params.ScriptPolicyID)
 	if err != nil {
 		return nil, err
 	}
 	return &api.ScriptPolicy{
 		ID:             policy.ID,
 		FromScriptHash: fmt.Sprintf("%x", policy.FromScriptHash),
 		ToScriptID:     policy.ToScriptID,
 		Policy:         int32(policy.Policy),
 	}, nil
 }
 // GetScriptPolicyFromHash implements getScriptPolicyFromHash operation.
 //
 // Get the policy for the given hash of script source code.
 //
 // GET /script-policy/hash/{FromScriptHash}
 func (svc *Service) GetScriptPolicyFromHash(ctx context.Context, params api.GetScriptPolicyFromHashParams) (*api.ScriptPolicy, error) {
 	_, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return nil, ErrUserInfo
 	}
 	// Read permission for script policy only requires you to be logged in
 	// parse hash from hex
 	hash, err := strconv.ParseUint(params.FromScriptHash, 16, 64)
 	if err != nil {
 		return nil, err
 	}
 	policy, err := svc.DB.ScriptPolicy().GetFromHash(ctx, hash)
 	if err != nil {
 		return nil, err
 	}
 	return &api.ScriptPolicy{
 		ID:             policy.ID,
 		FromScriptHash: fmt.Sprintf("%x", policy.FromScriptHash),
 		ToScriptID:     policy.ToScriptID,
 		Policy:         int32(policy.Policy),
 	}, nil
 }
 // UpdateScriptPolicy implements updateScriptPolicy operation.
 //
 // Update the specified script policy by ID.
 //
 // PATCH /script-policy/id/{ScriptPolicyID}
 func (svc *Service) UpdateScriptPolicy(ctx context.Context, req *api.ScriptPolicyUpdate, params api.UpdateScriptPolicyParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	if !userInfo.Roles.ScriptWrite {
 		return ErrPermissionDenied
 	}
 	pmap := datastore.Optional()
 	if from_script_id, ok := req.FromScriptID.Get(); ok {
 		from_script, err := svc.DB.Scripts().Get(ctx, from_script_id)
 		if err != nil {
 			return err
 		}
 		pmap.Add("from_script_hash", from_script.Hash)
 	}
 	if to_script_id, ok := req.ToScriptID.Get(); ok {
 		pmap.Add("to_script_id", to_script_id)
 	}
 	if policy, ok := req.Policy.Get(); ok {
 		pmap.Add("policy", policy)
 	}
 	return svc.DB.ScriptPolicy().Update(ctx, req.ID, pmap)
 }
--- a/pkg/service/scripts.go
+++ b/pkg/service/scripts.go
@ -0,0 +1,111 @@
 package service
 import (
 	"context"
 	"fmt"
 	"git.itzana.me/strafesnet/maps-service/pkg/api"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 	"github.com/dchest/siphash"
 )
 // CreateScript implements createScript operation.
 //
 // Create a new script.
 //
 // POST /scripts
 func (svc *Service) CreateScript(ctx context.Context, req *api.ScriptCreate) (*api.ID, error) {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return nil, ErrUserInfo
 	}
 	if !userInfo.Roles.ScriptWrite {
 		return nil, ErrPermissionDenied
 	}
 	script, err := svc.DB.Scripts().Create(ctx, model.Script{
 		ID:           0,
 		Hash:         siphash.Hash(0, 0, []byte(req.Source)),
 		Source:       req.Source,
 		SubmissionID: req.SubmissionID.Or(0),
 	})
 	if err != nil {
 		return nil, err
 	}
 	return &api.ID{
 		ID: script.ID,
 	}, nil
 }
 // DeleteScript implements deleteScript operation.
 //
 // Delete the specified script by ID.
 //
 // DELETE /scripts/{ScriptID}
 func (svc *Service) DeleteScript(ctx context.Context, params api.DeleteScriptParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	if !userInfo.Roles.ScriptWrite {
 		return ErrPermissionDenied
 	}
 	return svc.DB.Scripts().Delete(ctx, params.ScriptID)
 }
 // GetScript implements getScript operation.
 //
 // Get the specified script by ID.
 //
 // GET /scripts/{ScriptID}
 func (svc *Service) GetScript(ctx context.Context, params api.GetScriptParams) (*api.Script, error) {
 	_, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return nil, ErrUserInfo
 	}
 	// Read permission for scripts only requires you to be logged in
 	script, err := svc.DB.Scripts().Get(ctx, params.ScriptID)
 	if err != nil {
 		return nil, err
 	}
 	return &api.Script{
 		ID:           script.ID,
 		Hash:         fmt.Sprintf("%x", script.Hash),
 		Source:       script.Source,
 		SubmissionID: script.SubmissionID,
 	}, nil
 }
 // UpdateScript implements updateScript operation.
 //
 // Update the specified script by ID.
 //
 // PATCH /scripts/{ScriptID}
 func (svc *Service) UpdateScript(ctx context.Context, req *api.ScriptUpdate, params api.UpdateScriptParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	if !userInfo.Roles.ScriptWrite {
 		return ErrPermissionDenied
 	}
 	pmap := datastore.Optional()
 	if source, ok := req.Source.Get(); ok {
 		pmap.Add("source", source)
 		pmap.Add("hash", siphash.Hash(0, 0, []byte(source)))
 	}
 	if SubmissionID, ok := req.SubmissionID.Get(); ok {
 		pmap.Add("submission_id", SubmissionID)
 	}
 	return svc.DB.Scripts().Update(ctx, req.ID, pmap)
 }
--- a/pkg/service/security.go
+++ b/pkg/service/security.go
@ -0,0 +1,95 @@
 package service
 import (
 	"context"
 	"errors"
 	"git.itzana.me/strafesnet/go-grpc/auth"
 	"git.itzana.me/strafesnet/maps-service/pkg/api"
 )
 var (
 	// ErrMissingSessionID there is no session id
 	ErrMissingSessionID = errors.New("SessionID missing")
 	// ErrInvalidSession caller does not have a valid session
 	ErrInvalidSession = errors.New("Session invalid")
 )
 var (
 	// has SubmissionPublish
 	RoleMapAdmin int32 = 128
 	// has SubmissionReview
 	RoleMapCouncil int32 = 64
 )
 type Roles struct {
 	// human roles
 	SubmissionPublish bool
 	SubmissionReview  bool
 	ScriptWrite       bool
 	// automated roles
 	Maptest   bool
 	Validator bool
 }
 type UserInfo struct {
 	Roles  Roles
 	UserID uint64
 }
 func (usr UserInfo) IsSubmitter(submitter uint64) bool {
 	return usr.UserID == submitter
 }
 type SecurityHandler struct {
 	Client auth.AuthServiceClient
 }
 func (svc SecurityHandler) HandleCookieAuth(ctx context.Context, operationName api.OperationName, t api.CookieAuth) (context.Context, error) {
 	sessionId := t.GetAPIKey()
 	if sessionId == "" {
 		return nil, ErrMissingSessionID
 	}
 	session, err := svc.Client.GetSessionUser(ctx, &auth.IdMessage{
 		SessionID: sessionId,
 	})
 	if err != nil {
 		return nil, err
 	}
 	role, err := svc.Client.GetGroupRole(ctx, &auth.IdMessage{
 		SessionID: sessionId,
 	})
 	if err != nil {
 		return nil, err
 	}
 	validate, err := svc.Client.ValidateSession(ctx, &auth.IdMessage{
 		SessionID: sessionId,
 	})
 	if err != nil {
 		return nil, err
 	}
 	if !validate.Valid {
 		return nil, ErrInvalidSession
 	}
 	roles := Roles{}
 	// fix this when roblox udpates group roles
 	for _, r := range role.Roles {
 		if RoleMapAdmin <= r.Rank {
 			roles.SubmissionPublish = true
 		}
 		if RoleMapCouncil <= r.Rank {
 			roles.SubmissionReview = true
 		}
 	}
 	newCtx := context.WithValue(ctx, "UserInfo", UserInfo{
 		Roles:  roles,
 		UserID: session.UserID,
 	})
 	return newCtx, nil
 }
--- a/pkg/service/service.go
+++ b/pkg/service/service.go
@ -0,0 +1,41 @@
 package service
 import (
 	"context"
 	"errors"
 	"git.itzana.me/strafesnet/maps-service/pkg/api"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"github.com/nats-io/nats.go"
 )
 var (
 	// ErrPermissionDenied caller does not have the required role
 	ErrPermissionDenied = errors.New("Permission denied")
 	// ErrUserInfo user info is missing for some reason
 	ErrUserInfo = errors.New("Missing user info")
 )
 type Service struct {
 	DB   datastore.Datastore
 	Nats nats.JetStreamContext
 }
 // NewError creates *ErrorStatusCode from error returned by handler.
 //
 // Used for common default response.
 func (svc *Service) NewError(ctx context.Context, err error) *api.ErrorStatusCode {
 	status := 500
 	if errors.Is(err, ErrPermissionDenied) {
 		status = 403
 	}
 	if errors.Is(err, ErrUserInfo) {
 		status = 401
 	}
 	return &api.ErrorStatusCode{
 		StatusCode: status,
 		Response: api.Error{
 			Code:    int64(status),
 			Message: err.Error(),
 		},
 	}
 }
--- a/pkg/service/submissions.go
+++ b/pkg/service/submissions.go
@ -0,0 +1,390 @@
 package service
 import (
 	"context"
 	"encoding/json"
 	"git.itzana.me/strafesnet/maps-service/pkg/api"
 	"git.itzana.me/strafesnet/maps-service/pkg/datastore"
 	"git.itzana.me/strafesnet/maps-service/pkg/model"
 )
 // POST /submissions
 func (svc *Service) CreateSubmission(ctx context.Context, request *api.SubmissionCreate) (*api.ID, error) {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return nil, ErrUserInfo
 	}
 	submission, err := svc.DB.Submissions().Create(ctx, model.Submission{
 		ID:            0,
 		DisplayName:   request.DisplayName,
 		Creator:       request.Creator,
 		GameID:        request.GameID,
 		Submitter:     userInfo.UserID,
 		AssetID:       uint64(request.AssetID),
 		AssetVersion:  uint64(request.AssetVersion),
 		Completed:     false,
 		TargetAssetID: uint64(request.TargetAssetID.Value),
 		StatusID:      model.StatusUnderConstruction,
 	})
 	if err != nil {
 		return nil, err
 	}
 	return &api.ID{
 		ID: submission.ID,
 	}, nil
 }
 // GetSubmission implements getSubmission operation.
 //
 // Retrieve map with ID.
 //
 // GET /submissions/{SubmissionID}
 func (svc *Service) GetSubmission(ctx context.Context, params api.GetSubmissionParams) (*api.Submission, error) {
 	submission, err := svc.DB.Submissions().Get(ctx, params.SubmissionID)
 	if err != nil {
 		return nil, err
 	}
 	return &api.Submission{
 		ID:            submission.ID,
 		DisplayName:   submission.DisplayName,
 		Creator:       submission.Creator,
 		GameID:        submission.GameID,
 		CreatedAt:     submission.CreatedAt.Unix(),
 		UpdatedAt:     submission.UpdatedAt.Unix(),
 		Submitter:     int64(submission.Submitter),
 		AssetID:       int64(submission.AssetID),
 		AssetVersion:  int64(submission.AssetVersion),
 		Completed:     submission.Completed,
 		TargetAssetID: api.NewOptInt64(int64(submission.TargetAssetID)),
 		StatusID:      int32(submission.StatusID),
 	}, nil
 }
 // ListSubmissions implements listSubmissions operation.
 //
 // Get list of submissions.
 //
 // GET /submissions
 func (svc *Service) ListSubmissions(ctx context.Context, request api.ListSubmissionsParams) ([]api.Submission, error) {
 	filter := datastore.Optional()
 	//fmt.Println(request)
 	if request.Filter.IsSet() {
 		filter.AddNotNil("display_name", request.Filter.Value.DisplayName)
 		filter.AddNotNil("creator", request.Filter.Value.Creator)
 		filter.AddNotNil("game_id", request.Filter.Value.GameID)
 	}
 	items, err := svc.DB.Submissions().List(ctx, filter, model.Page{
 		Number: request.Page.GetPage(),
 		Size:   request.Page.GetLimit(),
 	})
 	if err != nil {
 		return nil, err
 	}
 	var resp []api.Submission
 	for i := 0; i < len(items); i++ {
 		resp = append(resp, api.Submission{
 			ID:            items[i].ID,
 			DisplayName:   items[i].DisplayName,
 			Creator:       items[i].Creator,
 			GameID:        items[i].GameID,
 			CreatedAt:     items[i].CreatedAt.Unix(),
 			UpdatedAt:     items[i].UpdatedAt.Unix(),
 			Submitter:     int64(items[i].Submitter),
 			AssetID:       int64(items[i].AssetID),
 			AssetVersion:  int64(items[i].AssetVersion),
 			Completed:     items[i].Completed,
 			TargetAssetID: api.NewOptInt64(int64(items[i].TargetAssetID)),
 			StatusID:      int32(items[i].StatusID),
 		})
 	}
 	return resp, nil
 }
 // PatchSubmissionCompleted implements patchSubmissionCompleted operation.
 //
 // Retrieve map with ID.
 //
 // POST /submissions/{SubmissionID}/completed
 func (svc *Service) SetSubmissionCompleted(ctx context.Context, params api.SetSubmissionCompletedParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// check if caller has MaptestGame role (request must originate from a maptest roblox game)
 	if !userInfo.Roles.Maptest {
 		return ErrPermissionDenied
 	}
 	pmap := datastore.Optional()
 	pmap.Add("completed", true)
 	err := svc.DB.Submissions().Update(ctx, params.SubmissionID, pmap)
 	return err
 }
 // PatchSubmissionModel implements patchSubmissionModel operation.
 //
 // Update model following role restrictions.
 //
 // POST /submissions/{SubmissionID}/model
 func (svc *Service) UpdateSubmissionModel(ctx context.Context, params api.UpdateSubmissionModelParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// read submission (this could be done with a transaction WHERE clause)
 	submission, err := svc.DB.Submissions().Get(ctx, params.SubmissionID)
 	if err != nil {
 		return err
 	}
 	// check if caller is the submitter
 	if !userInfo.IsSubmitter(submission.Submitter) {
 		return ErrPermissionDenied
 	}
 	// check if Status is ChangesRequested|Submitted|UnderConstruction
 	pmap := datastore.Optional()
 	pmap.AddNotNil("asset_id", params.ModelID)
 	pmap.AddNotNil("asset_version", params.VersionID)
 	//always reset completed when model changes
 	pmap.Add("completed", false)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusChangesRequested, model.StatusSubmitted, model.StatusUnderConstruction}, pmap)
 }
 // ActionSubmissionPublish invokes actionSubmissionPublish operation.
 //
 // Role Validator changes status from Publishing -> Published.
 //
 // POST /submissions/{SubmissionID}/status/publish
 func (svc *Service) ActionSubmissionPublish(ctx context.Context, params api.ActionSubmissionPublishParams) error {
 	println("[ActionSubmissionPublish] Implicit Validator permission granted!")
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusPublished)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusPublishing}, smap)
 }
 // ActionSubmissionReject invokes actionSubmissionReject operation.
 //
 // Role Reviewer changes status from Submitted -> Rejected.
 //
 // POST /submissions/{SubmissionID}/status/reject
 func (svc *Service) ActionSubmissionReject(ctx context.Context, params api.ActionSubmissionRejectParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// check if caller has required role
 	if !userInfo.Roles.SubmissionReview {
 		return ErrPermissionDenied
 	}
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusRejected)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusSubmitted}, smap)
 }
 // ActionSubmissionRequestChanges invokes actionSubmissionRequestChanges operation.
 //
 // Role Reviewer changes status from Validated|Accepted|Submitted -> ChangesRequested.
 //
 // POST /submissions/{SubmissionID}/status/request-changes
 func (svc *Service) ActionSubmissionRequestChanges(ctx context.Context, params api.ActionSubmissionRequestChangesParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// check if caller has required role
 	if !userInfo.Roles.SubmissionReview {
 		return ErrPermissionDenied
 	}
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusChangesRequested)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusValidated, model.StatusAccepted, model.StatusSubmitted}, smap)
 }
 // ActionSubmissionRevoke invokes actionSubmissionRevoke operation.
 //
 // Role Submitter changes status from Submitted|ChangesRequested -> UnderConstruction.
 //
 // POST /submissions/{SubmissionID}/status/revoke
 func (svc *Service) ActionSubmissionRevoke(ctx context.Context, params api.ActionSubmissionRevokeParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// read submission (this could be done with a transaction WHERE clause)
 	submission, err := svc.DB.Submissions().Get(ctx, params.SubmissionID)
 	if err != nil {
 		return err
 	}
 	// check if caller is the submitter
 	if !userInfo.IsSubmitter(submission.Submitter) {
 		return ErrPermissionDenied
 	}
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusUnderConstruction)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusSubmitted, model.StatusChangesRequested}, smap)
 }
 // ActionSubmissionSubmit invokes actionSubmissionSubmit operation.
 //
 // Role Submitter changes status from UnderConstruction|ChangesRequested -> Submitted.
 //
 // POST /submissions/{SubmissionID}/status/submit
 func (svc *Service) ActionSubmissionSubmit(ctx context.Context, params api.ActionSubmissionSubmitParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// read submission (this could be done with a transaction WHERE clause)
 	submission, err := svc.DB.Submissions().Get(ctx, params.SubmissionID)
 	if err != nil {
 		return err
 	}
 	// check if caller is the submitter
 	if !userInfo.IsSubmitter(submission.Submitter) {
 		return ErrPermissionDenied
 	}
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusSubmitted)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusUnderConstruction, model.StatusChangesRequested}, smap)
 }
 // ActionSubmissionTriggerPublish invokes actionSubmissionTriggerPublish operation.
 //
 // Role Admin changes status from Validated -> Publishing.
 //
 // POST /submissions/{SubmissionID}/status/trigger-publish
 func (svc *Service) ActionSubmissionTriggerPublish(ctx context.Context, params api.ActionSubmissionTriggerPublishParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// check if caller has required role
 	if !userInfo.Roles.SubmissionPublish {
 		return ErrPermissionDenied
 	}
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusPublishing)
 	submission, err := svc.DB.Submissions().IfStatusThenUpdateAndGet(ctx, params.SubmissionID, []model.Status{model.StatusValidated}, smap)
 	if err != nil {
 		return err
 	}
 	// sentinel value because we are not using rust
 	if submission.TargetAssetID == 0 {
 		// this is a new map
 		publish_new_request := model.PublishNewRequest{
 			SubmissionID: submission.ID,
 			ModelID:      submission.AssetID,
 			ModelVersion: submission.AssetVersion,
 			Creator:      submission.Creator,
 			DisplayName:  submission.DisplayName,
 			GameID:       uint32(submission.GameID),
 		}
 		j, err := json.Marshal(publish_new_request)
 		if err != nil {
 			return err
 		}
 		svc.Nats.Publish("maptest.submissions.publishnew", []byte(j))
 	} else {
 		// this is a map fix
 		publish_fix_request := model.PublishFixRequest{
 			SubmissionID:  submission.ID,
 			ModelID:       submission.AssetID,
 			ModelVersion:  submission.AssetVersion,
 			TargetAssetID: submission.TargetAssetID,
 		}
 		j, err := json.Marshal(publish_fix_request)
 		if err != nil {
 			return err
 		}
 		svc.Nats.Publish("maptest.submissions.publishfix", []byte(j))
 	}
 	return nil
 }
 // ActionSubmissionTriggerValidate invokes actionSubmissionTriggerValidate operation.
 //
 // Role Reviewer triggers validation and changes status from Submitted|Accepted -> Validating.
 //
 // POST /submissions/{SubmissionID}/status/trigger-validate
 func (svc *Service) ActionSubmissionTriggerValidate(ctx context.Context, params api.ActionSubmissionTriggerValidateParams) error {
 	userInfo, ok := ctx.Value("UserInfo").(UserInfo)
 	if !ok {
 		return ErrUserInfo
 	}
 	// check if caller has required role
 	if !userInfo.Roles.SubmissionReview {
 		return ErrPermissionDenied
 	}
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusValidating)
 	submission, err := svc.DB.Submissions().IfStatusThenUpdateAndGet(ctx, params.SubmissionID, []model.Status{model.StatusSubmitted, model.StatusAccepted}, smap)
 	if err != nil {
 		return err
 	}
 	validate_request := model.ValidateRequest{
 		SubmissionID:     submission.ID,
 		ModelID:          submission.AssetID,
 		ModelVersion:     submission.AssetVersion,
 		ValidatedModelID: 0, //TODO: reuse velidation models
 	}
 	j, err := json.Marshal(validate_request)
 	if err != nil {
 		return err
 	}
 	svc.Nats.Publish("maptest.submissions.validate", []byte(j))
 	return nil
 }
 // ActionSubmissionValidate invokes actionSubmissionValidate operation.
 //
 // Role Validator changes status from Validating -> Validated.
 //
 // POST /submissions/{SubmissionID}/status/validate
 func (svc *Service) ActionSubmissionValidate(ctx context.Context, params api.ActionSubmissionValidateParams) error {
 	println("[ActionSubmissionValidate] Implicit Validator permission granted!")
 	// transaction
 	smap := datastore.Optional()
 	smap.Add("status_id", model.StatusValidated)
 	return svc.DB.Submissions().IfStatusThenUpdate(ctx, params.SubmissionID, []model.Status{model.StatusValidating}, smap)
 }
--- a/server.go
+++ b/server.go
@ -1,200 +0,0 @@
 package main
 import (
 	"context"
 	"log"
 	"net/http"
 	"git.itzana.me/strafesnet/maps-service/api"
 	"git.itzana.me/strafesnet/maps-service/internal/controller/submissions"
 	"git.itzana.me/strafesnet/maps-service/internal/controller/users"
 )
 type apiServer struct {
 	submissions *submissions.Submissions
 	users *users.Users
 }
 // GetUserRank implements api.Handler.
 func (m *apiServer) GetSubmission(ctx context.Context, params api.GetSubmissionParams) (*api.Submission, error) {
 	return m.submissions.Get(ctx,params)
 }
 // NewError implements api.Handler.
 func (m *apiServer) NewError(ctx context.Context, err error) *api.ErrorStatusCode {
 	return &api.ErrorStatusCode{
 		StatusCode: 500,
 		Response:   api.Error{Message: err.Error()},
 	}
 }
 // GetTimes implements api.Handler.
 func (m *apiServer) ListTimes(ctx context.Context, params api.ListTimesParams) ([]api.Time, error) {
 	client := times.NewTimesServiceClient(m.client)
 	// Call the List method using params
 	req := &times.ListRequest{
 		Page: &times.Pagination{
 			Number: params.Page.GetPage(),
 			Size:   params.Page.GetLimit(),
 		},
 	}
 	if filter, ok := params.Filter.Get(); ok {
 		if id := filter.GetID(); id.IsSet() {
 			req.Filter.ID = &id.Value
 		}
 		if time := filter.GetTime(); time.IsSet() {
 			req.Filter.Time = &time.Value
 		}
 		if userID := filter.GetUserID(); userID.IsSet() {
 			req.Filter.UserID = &userID.Value
 		}
 		if mapID := filter.GetMapID(); mapID.IsSet() {
 			req.Filter.MapID = &mapID.Value
 		}
 		if styleID := filter.GetStyleID(); styleID.IsSet() {
 			req.Filter.StyleID = &styleID.Value
 		}
 		if modeID := filter.GetModeID(); modeID.IsSet() {
 			req.Filter.ModeID = &modeID.Value
 		}
 		if gameID := filter.GetGameID(); gameID.IsSet() {
 			req.Filter.GameID = &gameID.Value
 		}
 	}
 	response, err := client.List(ctx, req)
 	if err != nil {
 		return nil, err
 	}
 	return convertTimes(response.Times), nil
 }
 // GetUser implements api.Handler.
 func (m *apiServer) GetUser(ctx context.Context, params api.GetUserParams) (*api.User, error) {
 	client := users.NewUsersServiceClient(m.client)
 	response, err := client.Get(ctx, &users.IdMessage{
 		ID: params.UserID,
 	})
 	if err != nil {
 		return nil, err
 	}
 	return &api.User{
 		ID:       api.NewOptInt64(response.ID),
 		Username: api.NewOptString(response.Username),
 		StateID:  api.NewOptInt32(response.StateID),
 	}, nil
 }
 // ListRanks implements api.Handler.
 func (m *apiServer) ListRanks(ctx context.Context, params api.ListRanksParams) ([]api.Rank, error) {
 	client := ranks.NewRanksServiceClient(m.client)
 	req := &ranks.ListRequest{
 		Page: &ranks.Pagination{
 			Number: params.Page.GetPage(),
 			Size:   params.Page.GetLimit(),
 		},
 	}
 	if filter, ok := params.Filter.Get(); ok {
 		if gameID, ok := filter.GetGameID().Get(); ok {
 			req.GameID = gameID
 		}
 		if modeID, ok := filter.GetModeID().Get(); ok {
 			req.ModeID = modeID
 		}
 		if styleID, ok := filter.GetStyleID().Get(); ok {
 			req.StyleID = styleID
 		}
 		if sort, ok := filter.GetSort().Get(); ok {
 			req.Sort = sort
 		}
 	}
 	response, err := client.List(ctx, req)
 	if err != nil {
 		return nil, err
 	}
 	ranks := make([]api.Rank, len(response.Ranks))
 	for i, r := range response.Ranks {
 		ranks[i] = api.Rank{
 			ID: api.NewOptInt64(r.ID),
 			User: api.NewOptUser(api.User{
 				ID:       api.NewOptInt64(r.User.ID),
 				Username: api.NewOptString(r.User.Username),
 				StateID:  api.NewOptInt32(r.User.StateID),
 			}),
 			StyleID:   api.NewOptInt32(r.StyleID),
 			ModeID:    api.NewOptInt32(r.ModeID),
 			GameID:    api.NewOptInt32(r.GameID),
 			Rank:      api.NewOptFloat64(r.Rank),
 			Skill:     api.NewOptFloat64(r.Skill),
 			UpdatedAt: api.NewOptInt64(r.UpdatedAt),
 		}
 	}
 	return ranks, nil
 }
 func main() {
 	// new grpc client
 	conn, err := grpc.Dial("localhost:9000", grpc.WithTransportCredentials(insecure.NewCredentials()))
 	if err != nil {
 		log.Fatal(err)
 	}
 	svc := &apiServer{
 		client: conn,
 	}
 	srv, err := api.NewServer(
 		svc,
 		api.WithPathPrefix("/v2"),
 	)
 	if err != nil {
 		log.Fatal(err)
 	}
 	if err := http.ListenAndServe(":8080", srv); err != nil {
 		log.Fatal(err)
 	}
 }
 func convertTime(t *times.TimeResponse) api.Time {
 	return api.Time{
 		ID:   api.NewOptInt64(t.ID),
 		Time: api.NewOptInt64(t.Time),
 		User: api.NewOptUser(api.User{
 			ID:       api.NewOptInt64(t.User.ID),
 			Username: api.NewOptString(t.User.Username),
 			StateID:  api.NewOptInt32(t.User.StateID),
 		}),
 		Map: api.NewOptMap(api.Map{
 			ID:          api.NewOptInt64(t.Map.ID),
 			DisplayName: api.NewOptString(t.Map.DisplayName),
 			Creator:     api.NewOptString(t.Map.Creator),
 			Date:        api.NewOptInt64(t.Map.Date),
 		}),
 		Date:    api.NewOptInt64(t.Date),
 		StyleID: api.NewOptInt32(t.StyleID),
 		ModeID:  api.NewOptInt32(t.ModeID),
 		GameID:  api.NewOptInt32(t.GameID),
 	}
 }
 func convertTimes(timeList []*times.TimeResponse) []api.Time {
 	times := make([]api.Time, len(timeList))
 	for i, t := range timeList {
 		times[i] = convertTime(t)
 	}
 	return times
 }
--- a/validation/.cargo/config.toml
+++ b/validation/.cargo/config.toml
@ -0,0 +1,2 @@
 [registries.strafesnet]
 index = "sparse+https://git.itzana.me/api/packages/strafesnet/cargo/"
--- a/validation/Cargo.lock
+++ b/validation/Cargo.lock
--- a/validation/Cargo.toml
+++ b/validation/Cargo.toml
@ -1,7 +1,20 @@
 [package]
-name = "maps-valication"
+name = "maps-validation"
 version = "0.1.0"
 edition = "2021"
 [dependencies]
-bitflags = "2.6.0"
+api = { path = "api" }
 async-nats = "0.38.0"
 futures = "0.3.31"
 rbx_asset = { version = "0.2.5", registry = "strafesnet" }
 rbx_binary = { version = "0.7.4", registry = "strafesnet"}
 rbx_dom_weak = { version = "2.9.0", registry = "strafesnet"}
 rbx_reflection_database = { version = "0.2.12", registry = "strafesnet"}
 rbx_xml = { version = "0.13.3", registry = "strafesnet"}
 rust-grpc = { version = "1.0.3", registry = "strafesnet" }
 serde = { version = "1.0.215", features = ["derive"] }
 serde_json = "1.0.133"
 siphasher = "1.0.1"
 tokio = { version = "1.41.1", features = ["macros", "rt-multi-thread", "fs", "signal"] }
 tonic = "0.12.3"
--- a/validation/Containerfile
+++ b/validation/Containerfile
@ -0,0 +1,24 @@
 # Using the `rust-musl-builder` as base image, instead of
 # the official Rust toolchain
 FROM docker.io/clux/muslrust:stable AS chef
 USER root
 RUN cargo install cargo-chef
 WORKDIR /app
 FROM chef AS planner
 COPY . .
 RUN cargo chef prepare --recipe-path recipe.json
 FROM chef AS builder
 COPY --from=planner /app/recipe.json recipe.json
 COPY api ./api
 # Notice that we are specifying the --target flag!
 RUN cargo chef cook --release --target x86_64-unknown-linux-musl --recipe-path recipe.json
 COPY . .
 RUN cargo build --release --target x86_64-unknown-linux-musl --bin maps-validation
 FROM docker.io/alpine:latest AS runtime
 RUN addgroup -S myuser && adduser -S myuser -G myuser
 COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/maps-validation /usr/local/bin/
 USER myuser
 ENTRYPOINT ["/usr/local/bin/maps-validation"]
--- a/validation/api/Cargo.toml
+++ b/validation/api/Cargo.toml
@ -0,0 +1,17 @@
 [package]
 name = "api"
 version = "0.1.0"
 edition = "2021"
 publish = ["strafesnet"]
 repository = "https://git.itzana.me/StrafesNET/maps-service"
 license = "MIT OR Apache-2.0"
 description = "Browse and manage map submissions in the staging pipeline."
 authors = ["Rhys Lloyd <krakow20@gmail.com>"]
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 [dependencies]
 reqwest = { version = "0", features = ["json"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 url = "2"
--- a/validation/api/LICENSE-APACHE
+++ b/validation/api/LICENSE-APACHE
@ -0,0 +1,176 @@
                              Apache License
                        Version 2.0, January 2004
                     http://www.apache.org/licenses/
 TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 1. Definitions.
   "License" shall mean the terms and conditions for use, reproduction,
   and distribution as defined by Sections 1 through 9 of this document.
   "Licensor" shall mean the copyright owner or entity authorized by
   the copyright owner that is granting the License.
   "Legal Entity" shall mean the union of the acting entity and all
   other entities that control, are controlled by, or are under common
   control with that entity. For the purposes of this definition,
   "control" means (i) the power, direct or indirect, to cause the
   direction or management of such entity, whether by contract or
   otherwise, or (ii) ownership of fifty percent (50%) or more of the
   outstanding shares, or (iii) beneficial ownership of such entity.
   "You" (or "Your") shall mean an individual or Legal Entity
   exercising permissions granted by this License.
   "Source" form shall mean the preferred form for making modifications,
   including but not limited to software source code, documentation
   source, and configuration files.
   "Object" form shall mean any form resulting from mechanical
   transformation or translation of a Source form, including but
   not limited to compiled object code, generated documentation,
   and conversions to other media types.
   "Work" shall mean the work of authorship, whether in Source or
   Object form, made available under the License, as indicated by a
   copyright notice that is included in or attached to the work
   (an example is provided in the Appendix below).
   "Derivative Works" shall mean any work, whether in Source or Object
   form, that is based on (or derived from) the Work and for which the
   editorial revisions, annotations, elaborations, or other modifications
   represent, as a whole, an original work of authorship. For the purposes
   of this License, Derivative Works shall not include works that remain
   separable from, or merely link (or bind by name) to the interfaces of,
   the Work and Derivative Works thereof.
   "Contribution" shall mean any work of authorship, including
   the original version of the Work and any modifications or additions
   to that Work or Derivative Works thereof, that is intentionally
   submitted to Licensor for inclusion in the Work by the copyright owner
   or by an individual or Legal Entity authorized to submit on behalf of
   the copyright owner. For the purposes of this definition, "submitted"
   means any form of electronic, verbal, or written communication sent
   to the Licensor or its representatives, including but not limited to
   communication on electronic mailing lists, source code control systems,
   and issue tracking systems that are managed by, or on behalf of, the
   Licensor for the purpose of discussing and improving the Work, but
   excluding communication that is conspicuously marked or otherwise
   designated in writing by the copyright owner as "Not a Contribution."
   "Contributor" shall mean Licensor and any individual or Legal Entity
   on behalf of whom a Contribution has been received by Licensor and
   subsequently incorporated within the Work.
 2. Grant of Copyright License. Subject to the terms and conditions of
   this License, each Contributor hereby grants to You a perpetual,
   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
   copyright license to reproduce, prepare Derivative Works of,
   publicly display, publicly perform, sublicense, and distribute the
   Work and such Derivative Works in Source or Object form.
 3. Grant of Patent License. Subject to the terms and conditions of
   this License, each Contributor hereby grants to You a perpetual,
   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
   (except as stated in this section) patent license to make, have made,
   use, offer to sell, sell, import, and otherwise transfer the Work,
   where such license applies only to those patent claims licensable
   by such Contributor that are necessarily infringed by their
   Contribution(s) alone or by combination of their Contribution(s)
   with the Work to which such Contribution(s) was submitted. If You
   institute patent litigation against any entity (including a
   cross-claim or counterclaim in a lawsuit) alleging that the Work
   or a Contribution incorporated within the Work constitutes direct
   or contributory patent infringement, then any patent licenses
   granted to You under this License for that Work shall terminate
   as of the date such litigation is filed.
 4. Redistribution. You may reproduce and distribute copies of the
   Work or Derivative Works thereof in any medium, with or without
   modifications, and in Source or Object form, provided that You
   meet the following conditions:
   (a) You must give any other recipients of the Work or
       Derivative Works a copy of this License; and
   (b) You must cause any modified files to carry prominent notices
       stating that You changed the files; and
   (c) You must retain, in the Source form of any Derivative Works
       that You distribute, all copyright, patent, trademark, and
       attribution notices from the Source form of the Work,
       excluding those notices that do not pertain to any part of
       the Derivative Works; and
   (d) If the Work includes a "NOTICE" text file as part of its
       distribution, then any Derivative Works that You distribute must
       include a readable copy of the attribution notices contained
       within such NOTICE file, excluding those notices that do not
       pertain to any part of the Derivative Works, in at least one
       of the following places: within a NOTICE text file distributed
       as part of the Derivative Works; within the Source form or
       documentation, if provided along with the Derivative Works; or,
       within a display generated by the Derivative Works, if and
       wherever such third-party notices normally appear. The contents
       of the NOTICE file are for informational purposes only and
       do not modify the License. You may add Your own attribution
       notices within Derivative Works that You distribute, alongside
       or as an addendum to the NOTICE text from the Work, provided
       that such additional attribution notices cannot be construed
       as modifying the License.
   You may add Your own copyright statement to Your modifications and
   may provide additional or different license terms and conditions
   for use, reproduction, or distribution of Your modifications, or
   for any such Derivative Works as a whole, provided Your use,
   reproduction, and distribution of the Work otherwise complies with
   the conditions stated in this License.
 5. Submission of Contributions. Unless You explicitly state otherwise,
   any Contribution intentionally submitted for inclusion in the Work
   by You to the Licensor shall be under the terms and conditions of
   this License, without any additional terms or conditions.
   Notwithstanding the above, nothing herein shall supersede or modify
   the terms of any separate license agreement you may have executed
   with Licensor regarding such Contributions.
 6. Trademarks. This License does not grant permission to use the trade
   names, trademarks, service marks, or product names of the Licensor,
   except as required for reasonable and customary use in describing the
   origin of the Work and reproducing the content of the NOTICE file.
 7. Disclaimer of Warranty. Unless required by applicable law or
   agreed to in writing, Licensor provides the Work (and each
   Contributor provides its Contributions) on an "AS IS" BASIS,
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
   implied, including, without limitation, any warranties or conditions
   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
   PARTICULAR PURPOSE. You are solely responsible for determining the
   appropriateness of using or redistributing the Work and assume any
   risks associated with Your exercise of permissions under this License.
 8. Limitation of Liability. In no event and under no legal theory,
   whether in tort (including negligence), contract, or otherwise,
   unless required by applicable law (such as deliberate and grossly
   negligent acts) or agreed to in writing, shall any Contributor be
   liable to You for damages, including any direct, indirect, special,
   incidental, or consequential damages of any character arising as a
   result of this License or out of the use or inability to use the
   Work (including but not limited to damages for loss of goodwill,
   work stoppage, computer failure or malfunction, or any and all
   other commercial damages or losses), even if such Contributor
   has been advised of the possibility of such damages.
 9. Accepting Warranty or Additional Liability. While redistributing
   the Work or Derivative Works thereof, You may choose to offer,
   and charge a fee for, acceptance of support, warranty, indemnity,
   or other liability obligations and/or rights consistent with this
   License. However, in accepting such obligations, You may act only
   on Your own behalf and on Your sole responsibility, not on behalf
   of any other Contributor, and only if You agree to indemnify,
   defend, and hold each Contributor harmless for any liability
   incurred by, or claims asserted against, such Contributor by reason
   of your accepting any such warranty or additional liability.
 END OF TERMS AND CONDITIONS
--- a/validation/api/LICENSE-MIT
+++ b/validation/api/LICENSE-MIT
@ -0,0 +1,23 @@
 Permission is hereby granted, free of charge, to any
 person obtaining a copy of this software and associated
 documentation files (the "Software"), to deal in the
 Software without restriction, including without
 limitation the rights to use, copy, modify, merge,
 publish, distribute, sublicense, and/or sell copies of
 the Software, and to permit persons to whom the Software
 is furnished to do so, subject to the following
 conditions:
 The above copyright notice and this permission notice
 shall be included in all copies or substantial portions
 of the Software.
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
 ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
 TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
 PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
 SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
 IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.
--- a/validation/api/src/lib.rs
+++ b/validation/api/src/lib.rs
@ -0,0 +1,130 @@
 #[derive(Debug)]
 pub enum Error{
 	ParseError(url::ParseError),
 	Reqwest(reqwest::Error),
 }
 impl std::fmt::Display for Error{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for Error{}
 #[derive(serde::Deserialize)]
 pub struct ScriptID(i64);
 #[allow(nonstandard_style)]
 pub struct GetScriptRequest{
 	pub ScriptID:ScriptID,
 }
 #[allow(nonstandard_style)]
 #[derive(serde::Deserialize)]
 pub struct ScriptResponse{
 	pub ID:i64,
 	pub Hash:String,
 	pub Source:String,
 	pub SubmissionID:i64,
 }
 #[derive(serde::Deserialize)]
 #[repr(i32)]
 pub enum Policy{
 	Allowed=0,
 	Blocked=1,
 	Delete=2,
 	Replace=3,
 }
 pub struct ScriptPolicyHashRequest{
 	pub hash:String,
 }
 #[allow(nonstandard_style)]
 #[derive(serde::Deserialize)]
 pub struct ScriptPolicyResponse{
 	pub ID:i64,
 	pub FromScriptHash:String,
 	pub ToScriptID:ScriptID,
 	pub Policy:Policy
 }
 #[allow(nonstandard_style)]
 pub struct UpdateSubmissionModelRequest{
 	pub ID:i64,
 	pub ModelID:u64,
 	pub ModelVersion:u64,
 }
 pub struct SubmissionID(pub i64);
 #[derive(Clone)]
 pub struct Context{
 	base_url:String,
 	client:reqwest::Client,
 }
 pub type ReqwestError=reqwest::Error;
 // there are lots of action endpoints and they all follow the same pattern
 macro_rules! action{
 	($fname:ident,$action:expr)=>{
 		pub async fn $fname(&self,config:SubmissionID)->Result<(),Error>{
 			let url_raw=format!(concat!("{}/submissions/{}/status/",$action),self.base_url,config.0);
 			let url=reqwest::Url::parse(url_raw.as_str()).map_err(Error::ParseError)?;
 			self.post(url).await.map_err(Error::Reqwest)?
 			.error_for_status().map_err(Error::Reqwest)?;
 			Ok(())
 		}
 	};
 }
 impl Context{
 	pub fn new(mut base_url:String)->reqwest::Result<Self>{
 		base_url+="/v1";
 		Ok(Self{
 			base_url,
 			client:reqwest::Client::new(),
 		})
 	}
 	async fn get(&self,url:impl reqwest::IntoUrl)->Result<reqwest::Response,reqwest::Error>{
 		self.client.get(url)
 		.send().await
 	}
 	async fn post(&self,url:impl reqwest::IntoUrl)->Result<reqwest::Response,reqwest::Error>{
 		self.client.post(url)
 		.send().await
 	}
 	pub async fn get_script(&self,config:GetScriptRequest)->Result<ScriptResponse,Error>{
 		let url_raw=format!("{}/scripts/{}",self.base_url,config.ScriptID.0);
 		let url=reqwest::Url::parse(url_raw.as_str()).map_err(Error::ParseError)?;
 		self.get(url).await.map_err(Error::Reqwest)?
 		.error_for_status().map_err(Error::Reqwest)?
 		.json().await.map_err(Error::Reqwest)
 	}
 	pub async fn get_script_policy_from_hash(&self,config:ScriptPolicyHashRequest)->Result<ScriptPolicyResponse,Error>{
 		let url_raw=format!("{}/script-policy/hash/{}",self.base_url,config.hash);
 		let url=reqwest::Url::parse(url_raw.as_str()).map_err(Error::ParseError)?;
 		self.get(url).await.map_err(Error::Reqwest)?
 		.error_for_status().map_err(Error::Reqwest)?
 		.json().await.map_err(Error::Reqwest)
 	}
 	pub async fn update_submission_model(&self,config:UpdateSubmissionModelRequest)->Result<(),Error>{
 		let url_raw=format!("{}/submissions/{}/model",self.base_url,config.ID);
 		let mut url=reqwest::Url::parse(url_raw.as_str()).map_err(Error::ParseError)?;
 		{
 			url.query_pairs_mut()
 				.append_pair("ModelID",config.ModelID.to_string().as_str())
 				.append_pair("ModelVersion",config.ModelVersion.to_string().as_str());
 		}
 		self.post(url).await.map_err(Error::Reqwest)?
 		.error_for_status().map_err(Error::Reqwest)?;
 		Ok(())
 	}
 	action!(action_submission_validate,"validator-validated");
 	action!(action_submission_publish,"validator-published");
 }
--- a/validation/src/main.rs
+++ b/validation/src/main.rs
@ -1,6 +1,98 @@
-mod types;
+use futures::StreamExt;
 mod maptest;
 mod staging;
-fn main(){
+mod nats_types;
 mod validator;
 mod publish_new;
 mod publish_fix;
 mod message_handler;
 #[allow(dead_code)]
 #[derive(Debug)]
 pub enum StartupError{
 	API(api::ReqwestError),
 	NatsConnect(async_nats::ConnectError),
 	NatsGetStream(async_nats::jetstream::context::GetStreamError),
 	NatsConsumer(async_nats::jetstream::stream::ConsumerError),
 	NatsStream(async_nats::jetstream::consumer::StreamError),
 	GRPCConnect(tonic::transport::Error),
 }
 impl std::fmt::Display for StartupError{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for StartupError{}
 // annoying mile-long type
 pub type MapsServiceClient=rust_grpc::maps::maps_service_client::MapsServiceClient<tonic::transport::channel::Channel>;
 pub const GROUP_STRAFESNET:u64=6980477;
 pub const PARALLEL_REQUESTS:usize=16;
 #[tokio::main]
 async fn main()->Result<(),StartupError>{
 	// talk to roblox through STRAFESNET_CI2 account
 	let cookie=std::env::var("RBXCOOKIE").expect("RBXCOOKIE env required");
 	let cookie_context=rbx_asset::cookie::CookieContext::new(rbx_asset::cookie::Cookie::new(cookie));
 	// maps-service api
 	let api_host=std::env::var("API_HOST").expect("API_HOST env required");
 	let api=api::Context::new(api_host).map_err(StartupError::API)?;
 	// nats
 	let nats_host=std::env::var("NATS_HOST").expect("NATS_HOST env required");
 	let nats_fut=async{
 		let nasty=async_nats::connect(nats_host).await.map_err(StartupError::NatsConnect)?;
 		// use nats jetstream
 		async_nats::jetstream::new(nasty)
 			.get_stream("maptest").await.map_err(StartupError::NatsGetStream)?
 			.get_or_create_consumer("validation",async_nats::jetstream::consumer::pull::Config{
 				name:Some("validation".to_owned()),
 				durable_name:Some("validation".to_owned()),
 				filter_subject:"maptest.submissions.>".to_owned(),
 				..Default::default()
 			}).await.map_err(StartupError::NatsConsumer)?
 			.messages().await.map_err(StartupError::NatsStream)
 	};
 	// data-service grpc for creating map entries
 	let data_host=std::env::var("DATA_HOST").expect("DATA_HOST env required");
 	let message_handler_fut=async{
 		let maps_grpc=crate::MapsServiceClient::connect(data_host).await.map_err(StartupError::GRPCConnect)?;
 		Ok(message_handler::MessageHandler::new(cookie_context,api,maps_grpc))
 	};
 	// Create a signal listener for SIGTERM
 	let mut sig_term=tokio::signal::unix::signal(tokio::signal::unix::SignalKind::terminate()).expect("Failed to create SIGTERM signal listener");
 	// run futures
 	let (mut messages,message_handler)=tokio::try_join!(nats_fut,message_handler_fut)?;
 	// process up to PARALLEL_REQUESTS in parallel
 	let main_loop=async move{
 		static SEM:tokio::sync::Semaphore=tokio::sync::Semaphore::const_new(PARALLEL_REQUESTS);
 		// use memory leak to make static lifetime
 		let message_handler=Box::leak(Box::new(message_handler));
 		// acquire a permit before attempting to receive a message, exit if either fails
 		while let (Ok(permit),Some(message_result))=(SEM.acquire().await,messages.next().await){
 			// handle the message on a new thread (mainly to decode the model file)
 			tokio::spawn(async{
 				match message_handler.handle_message_result(message_result).await{
 					Ok(())=>println!("[Validation] Success, hooray!"),
 					Err(e)=>println!("[Validation] There was an error, oopsie! {e}"),
 				}
 				// explicitly call drop to make the move semantics and permit release more obvious
 				core::mem::drop(permit);
 			});
 		}
 	};
 	// race sigkill and main loop termination and then die
 	tokio::select!{
 		_=sig_term.recv()=>(),
 		_=main_loop=>(),
 	};
 	Ok(())
 }
--- a/validation/src/maptest.rs
+++ b/validation/src/maptest.rs
@ -23,6 +23,8 @@ enum Status{
 Submitter:
 	UnderConstruction -> Submitted
 	ChangesRequested -> Submitted
 	Submitted -> UnderConstruction
 	ChangesRequested -> UnderConstruction
 Reviewer:
 	Submitted -> Validating
 	Submitted -> Rejected
@ -31,6 +33,7 @@ Reviewer:
 	Accepted -> Validating // re-validate
 Validator:
 	Validating -> Validated
 	Validating -> Accepted // invalidate
 	Publishing -> Published
 Admin:
 	Validated -> Publishing
@ -64,6 +67,7 @@ struct Submission{
 	// this user is allowed to change any data in the maptest phase, except for mapfix target map id
 	submitter:u64,
 	// MUTABLE FIELDS (depending on roles and status)
 	validated_model_id:Option<u64>,// asset id to reuse if the map has scripts that need to be replaced when validated
 	model_id:u64,// asset id of the most recently submitted model
 	model_version:u64,// snapshot of the model to prevent tampering
 	is_completed:bool,// has this asset version been completed by any player
--- a/validation/src/message_handler.rs
+++ b/validation/src/message_handler.rs
@ -0,0 +1,48 @@
 #[allow(dead_code)]
 #[derive(Debug)]
 pub enum HandleMessageError{
 	Messages(async_nats::jetstream::consumer::pull::MessagesError),
 	DoubleAck(async_nats::Error),
 	UnknownSubject(String),
 	PublishNew(crate::publish_new::PublishError),
 	PublishFix(crate::publish_fix::PublishError),
 	Validation(crate::validator::ValidateError),
 }
 impl std::fmt::Display for HandleMessageError{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for HandleMessageError{}
 pub type MessageResult=Result<async_nats::jetstream::Message,async_nats::jetstream::consumer::pull::MessagesError>;
 pub struct MessageHandler{
 	publish_new:crate::publish_new::Publisher,
 	publish_fix:crate::publish_fix::Publisher,
 	validator:crate::validator::Validator,
 }
 impl MessageHandler{
 	pub fn new(
 		cookie_context:rbx_asset::cookie::CookieContext,
 		api:api::Context,
 		maps_grpc:crate::MapsServiceClient,
 	)->Self{
 		Self{
 			publish_new:crate::publish_new::Publisher::new(cookie_context.clone(),api.clone(),maps_grpc),
 			publish_fix:crate::publish_fix::Publisher::new(cookie_context.clone(),api.clone()),
 			validator:crate::validator::Validator::new(cookie_context,api),
 		}
 	}
 	pub async fn handle_message_result(&self,message_result:MessageResult)->Result<(),HandleMessageError>{
 		let message=message_result.map_err(HandleMessageError::Messages)?;
 		message.double_ack().await.map_err(HandleMessageError::DoubleAck)?;
 		match message.subject.as_str(){
 			"maptest.submissions.publishnew"=>self.publish_new.publish(message).await.map_err(HandleMessageError::PublishNew),
 			"maptest.submissions.publishfix"=>self.publish_fix.publish(message).await.map_err(HandleMessageError::PublishFix),
 			"maptest.submissions.validate"=>self.validator.validate(message).await.map_err(HandleMessageError::Validation),
 			other=>Err(HandleMessageError::UnknownSubject(other.to_owned()))
 		}
 	}
 }
--- a/validation/src/nats_types.rs
+++ b/validation/src/nats_types.rs
@ -0,0 +1,37 @@
 // These represent the information needed in the nats message
 // to perform the operation, not necessarily the over-the-wire format
 // Requests are sent from maps-service to validator
 // Validation invokes the REST api to update the submissions
 #[allow(nonstandard_style)]
 #[derive(serde::Deserialize)]
 pub struct ValidateRequest{
 	// submission_id is passed back in the response message
 	pub SubmissionID:i64,
 	pub ModelID:u64,
 	pub ModelVersion:u64,
 	pub ValidatedModelID:Option<u64>,
 }
 // Create a new map
 #[allow(nonstandard_style)]
 #[derive(serde::Deserialize)]
 pub struct PublishNewRequest{
 	pub SubmissionID:i64,
 	pub ModelID:u64,
 	pub ModelVersion:u64,
 	pub Creator:String,
 	pub DisplayName:String,
 	pub GameID:u32,
 	//games:HashSet<GameID>,
 }
 #[allow(nonstandard_style)]
 #[derive(serde::Deserialize)]
 pub struct PublishFixRequest{
 	pub SubmissionID:i64,
 	pub ModelID:u64,
 	pub ModelVersion:u64,
 	pub TargetAssetID:u64,
 }
--- a/validation/src/publish_fix.rs
+++ b/validation/src/publish_fix.rs
@ -0,0 +1,62 @@
 use crate::nats_types::PublishFixRequest;
 #[allow(dead_code)]
 #[derive(Debug)]
 pub enum PublishError{
 	Get(rbx_asset::cookie::GetError),
 	Json(serde_json::Error),
 	Upload(rbx_asset::cookie::UploadError),
 	ApiActionSubmissionPublish(api::Error),
 }
 impl std::fmt::Display for PublishError{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for PublishError{}
 pub struct Publisher{
 	roblox_cookie:rbx_asset::cookie::CookieContext,
 	api:api::Context,
 }
 impl Publisher{
 	pub const fn new(
 		roblox_cookie:rbx_asset::cookie::CookieContext,
 		api:api::Context,
 	)->Self{
 		Self{
 			roblox_cookie,
 			api,
 		}
 	}
 	pub async fn publish(&self,message:async_nats::jetstream::Message)->Result<(),PublishError>{
 		println!("publish_fix {:?}",message.message.payload);
 		// decode json
 		let publish_info:PublishFixRequest=serde_json::from_slice(&message.payload).map_err(PublishError::Json)?;
 		// download the map model version
 		let model_data=self.roblox_cookie.get_asset(rbx_asset::cookie::GetAssetRequest{
 			asset_id:publish_info.ModelID,
 			version:Some(publish_info.ModelVersion),
 		}).await.map_err(PublishError::Get)?;
 		// upload the map to the strafesnet group
 		let _upload_response=self.roblox_cookie.upload(rbx_asset::cookie::UploadRequest{
 			assetid:publish_info.TargetAssetID,
 			groupId:Some(crate::GROUP_STRAFESNET),
 			name:None,
 			description:None,
 			ispublic:None,
 			allowComments:None,
 		},model_data).await.map_err(PublishError::Upload)?;
 		// that's it, the database entry does not need to be changed.
 		// mark submission as published
 		self.api.action_submission_publish(
 			api::SubmissionID(publish_info.SubmissionID)
 		).await.map_err(PublishError::ApiActionSubmissionPublish)?;
 		Ok(())
 	}
 }
--- a/validation/src/publish_new.rs
+++ b/validation/src/publish_new.rs
@ -0,0 +1,83 @@
 use crate::nats_types::PublishNewRequest;
 #[allow(dead_code)]
 #[derive(Debug)]
 pub enum PublishError{
 	Get(rbx_asset::cookie::GetError),
 	Json(serde_json::Error),
 	Create(rbx_asset::cookie::CreateError),
 	SystemTime(std::time::SystemTimeError),
 	MapCreate(tonic::Status),
 	ApiActionSubmissionPublish(api::Error),
 }
 impl std::fmt::Display for PublishError{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for PublishError{}
 pub struct Publisher{
 	roblox_cookie:rbx_asset::cookie::CookieContext,
 	api:api::Context,
 	maps_grpc:crate::MapsServiceClient,
 }
 impl Publisher{
 	pub const fn new(
 		roblox_cookie:rbx_asset::cookie::CookieContext,
 		api:api::Context,
 		maps_grpc:crate::MapsServiceClient,
 	)->Self{
 		Self{
 			roblox_cookie,
 			api,
 			maps_grpc,
 		}
 	}
 	pub async fn publish(&self,message:async_nats::jetstream::Message)->Result<(),PublishError>{
 		println!("publish_new {:?}",message.message.payload);
 		// decode json
 		let publish_info:PublishNewRequest=serde_json::from_slice(&message.payload).map_err(PublishError::Json)?;
 		// download the map model version
 		let model_data=self.roblox_cookie.get_asset(rbx_asset::cookie::GetAssetRequest{
 			asset_id:publish_info.ModelID,
 			version:Some(publish_info.ModelVersion),
 		}).await.map_err(PublishError::Get)?;
 		// upload the map to the strafesnet group
 		let upload_response=self.roblox_cookie.create(rbx_asset::cookie::CreateRequest{
 			name:publish_info.DisplayName.clone(),
 			description:"".to_owned(),
 			ispublic:false,
 			allowComments:false,
 			groupId:Some(crate::GROUP_STRAFESNET),
 		},model_data).await.map_err(PublishError::Create)?;
 		// create the map entry in the game database, including release date
 		self.maps_grpc.clone().create(rust_grpc::maps::MapRequest{
 			id:upload_response.AssetId as i64,
 			display_name:Some(publish_info.DisplayName),
 			creator:Some(publish_info.Creator),
 			game_id:Some(publish_info.GameID as i32),
 			// TODO: scheduling algorithm
 			date:Some(
 				// Publish one week from now
 				(
 					std::time::SystemTime::now()
 					+std::time::Duration::from_secs(7*24*60*60)
 				)
 				.duration_since(std::time::SystemTime::UNIX_EPOCH)
 				.map_err(PublishError::SystemTime)?
 				.as_secs() as i64
 			),
 		}).await.map_err(PublishError::MapCreate)?;
 		// mark submission as published
 		self.api.action_submission_publish(
 			api::SubmissionID(publish_info.SubmissionID)
 		).await.map_err(PublishError::ApiActionSubmissionPublish)?;
 		Ok(())
 	}
 }
--- a/validation/src/validator.rs
+++ b/validation/src/validator.rs
@ -0,0 +1,241 @@
 use futures::TryStreamExt;
 use crate::nats_types::ValidateRequest;
 const SCRIPT_CONCURRENCY:usize=16;
 enum Policy{
 	Allowed,
 	Blocked,
 	Delete,
 	Replace(String),
 }
 #[allow(dead_code)]
 #[derive(Debug)]
 pub enum ValidateError{
 	Blocked,
 	NotAllowed,
 	Get(rbx_asset::cookie::GetError),
 	Json(serde_json::Error),
 	ReadDom(ReadDomError),
 	ApiGetScriptPolicy(api::Error),
 	ApiGetScript(api::Error),
 	ApiUpdateSubmissionModel(api::Error),
 	ApiActionSubmissionValidate(api::Error),
 	WriteDom(rbx_binary::EncodeError),
 	Upload(rbx_asset::cookie::UploadError),
 	Create(rbx_asset::cookie::CreateError),
 }
 impl std::fmt::Display for ValidateError{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for ValidateError{}
 pub struct Validator{
 	roblox_cookie:rbx_asset::cookie::CookieContext,
 	api:api::Context,
 }
 impl Validator{
 	pub const fn new(
 		roblox_cookie:rbx_asset::cookie::CookieContext,
 		api:api::Context,
 	)->Self{
 		Self{
 			roblox_cookie,
 			api,
 		}
 	}
 	pub async fn validate(&self,message:async_nats::jetstream::Message)->Result<(),ValidateError>{
 		println!("validate {:?}",message.message.payload);
 		// decode json
 		let validate_info:ValidateRequest=serde_json::from_slice(&message.payload).map_err(ValidateError::Json)?;
 		// download map
 		let data=self.roblox_cookie.get_asset(rbx_asset::cookie::GetAssetRequest{
 			asset_id:validate_info.ModelID,
 			version:Some(validate_info.ModelVersion),
 		}).await.map_err(ValidateError::Get)?;
 		// decode dom (slow!)
 		let mut dom=read_dom(&mut std::io::Cursor::new(data)).map_err(ValidateError::ReadDom)?;
 		/* VALIDATE MAP */
 		// collect unique scripts
 		let script_refs=get_script_refs(&dom);
 		let mut script_map=std::collections::HashMap::<String,Policy>::new();
 		for &script_ref in &script_refs{
 			if let Some(script)=dom.get_by_ref(script_ref){
 				if let Some(rbx_dom_weak::types::Variant::String(source))=script.properties.get("Source"){
 					script_map.insert(source.clone(),Policy::Blocked);
 				}
 			}
 		}
 		// send all script hashes to REST endpoint and retrieve the replacements
 		futures::stream::iter(script_map.iter_mut().map(Ok))
 		.try_for_each_concurrent(Some(SCRIPT_CONCURRENCY),|(source,replacement)|async{
 			// get the hash
 			let mut hasher=siphasher::sip::SipHasher::new();
 			std::hash::Hasher::write(&mut hasher,source.as_bytes());
 			let hash=std::hash::Hasher::finish(&hasher);
 			// fetch the script policy
 			let script_policy=self.api.get_script_policy_from_hash(api::ScriptPolicyHashRequest{
 				hash:format!("{:x}",hash),
 			}).await.map_err(ValidateError::ApiGetScriptPolicy)?;
 			// write the policy to the script_map, fetching the replacement code if necessary
 			*replacement=match script_policy.Policy{
 				api::Policy::Allowed=>Policy::Allowed,
 				api::Policy::Blocked=>Policy::Blocked,
 				api::Policy::Delete=>Policy::Delete,
 				api::Policy::Replace=>{
 					let script=self.api.get_script(api::GetScriptRequest{
 						ScriptID:script_policy.ToScriptID,
 					}).await.map_err(ValidateError::ApiGetScript)?;
 					Policy::Replace(script.Source)
 				},
 			};
 			Ok(())
 		})
 		.await?;
 		// make the replacements
 		let mut modified=false;
 		for &script_ref in &script_refs{
 			if let Some(script)=dom.get_by_ref_mut(script_ref){
 				if let Some(rbx_dom_weak::types::Variant::String(source))=script.properties.get_mut("Source"){
 					match script_map.get(source.as_str()){
 						Some(Policy::Blocked)=>return Err(ValidateError::Blocked),
 						None=>return Err(ValidateError::NotAllowed),
 						Some(Policy::Allowed)=>(),
 						Some(Policy::Delete)=>{
 							modified=true;
 							// delete script
 							dom.destroy(script_ref);
 						},
 						Some(Policy::Replace(replacement))=>{
 							modified=true;
 							*source=replacement.clone();
 						},
 					}
 				}
 			}
 		}
 		// if the model was validated, the submission must be changed to use the modified model
 		if modified{
 			// serialize model (slow!)
 			let mut data=Vec::new();
 			rbx_binary::to_writer(&mut data,&dom,dom.root().children()).map_err(ValidateError::WriteDom)?;
 			// upload a model lol
 			let model_id=if let Some(model_id)=validate_info.ValidatedModelID{
 				// upload to existing id
 				let response=self.roblox_cookie.upload(rbx_asset::cookie::UploadRequest{
 					assetid:model_id,
 					name:None,
 					description:None,
 					ispublic:None,
 					allowComments:None,
 					groupId:None,
 				},data).await.map_err(ValidateError::Upload)?;
 				response.AssetId
 			}else{
 				// create new model
 				let response=self.roblox_cookie.create(rbx_asset::cookie::CreateRequest{
 					name:dom.root().name.clone(),
 					description:"".to_owned(),
 					ispublic:true,
 					allowComments:true,
 					groupId:None,
 				},data).await.map_err(ValidateError::Create)?;
 				response.AssetId
 			};
 			// update the submission to use the validated model
 			self.api.update_submission_model(api::UpdateSubmissionModelRequest{
 				ID:validate_info.SubmissionID,
 				ModelID:model_id,
 				ModelVersion:1, //TODO
 			}).await.map_err(ValidateError::ApiUpdateSubmissionModel)?;
 		};
 		// update the submission model status to validated
 		self.api.action_submission_validate(
 			api::SubmissionID(validate_info.SubmissionID)
 		).await.map_err(ValidateError::ApiActionSubmissionValidate)?;
 		Ok(())
 	}
 }
 #[allow(dead_code)]
 #[derive(Debug)]
 pub enum ReadDomError{
 	Binary(rbx_binary::DecodeError),
 	Xml(rbx_xml::DecodeError),
 	Read(std::io::Error),
 	Seek(std::io::Error),
 	UnknownFormat([u8;8]),
 }
 impl std::fmt::Display for ReadDomError{
 	fn fmt(&self,f:&mut std::fmt::Formatter<'_>)->std::fmt::Result{
 		write!(f,"{self:?}")
 	}
 }
 impl std::error::Error for ReadDomError{}
 fn read_dom<R:std::io::Read+std::io::Seek>(input:&mut R)->Result<rbx_dom_weak::WeakDom,ReadDomError>{
 	let mut first_8=[0u8;8];
 	std::io::Read::read_exact(input,&mut first_8).map_err(ReadDomError::Read)?;
 	std::io::Seek::rewind(input).map_err(ReadDomError::Seek)?;
 	match &first_8[0..4]{
 		b"<rob"=>{
 			match &first_8[4..8]{
 				b"lox!"=>rbx_binary::from_reader(input).map_err(ReadDomError::Binary),
 				b"lox "=>rbx_xml::from_reader(input,rbx_xml::DecodeOptions::default()).map_err(ReadDomError::Xml),
 				_=>Err(ReadDomError::UnknownFormat(first_8)),
 			}
 		},
 		_=>Err(ReadDomError::UnknownFormat(first_8)),
 	}
 }
 fn class_is_a(class:&str,superclass:&str)->bool{
 	if class==superclass{
 		return true
 	}
 	let class_descriptor=rbx_reflection_database::get().classes.get(class);
 	if let Some(descriptor)=&class_descriptor{
 		if let Some(class_super)=&descriptor.superclass{
 			return class_is_a(&class_super,superclass)
 		}
 	}
 	false
 }
 fn recursive_collect_superclass(objects:&mut std::vec::Vec<rbx_dom_weak::types::Ref>,dom:&rbx_dom_weak::WeakDom,instance:&rbx_dom_weak::Instance,superclass:&str){
 	for &referent in instance.children(){
 		if let Some(c)=dom.get_by_ref(referent){
 			if class_is_a(c.class.as_str(),superclass){
 				objects.push(c.referent());//copy ref
 			}
 			recursive_collect_superclass(objects,dom,c,superclass);
 		}
 	}
 }
 fn get_script_refs(dom:&rbx_dom_weak::WeakDom)->Vec<rbx_dom_weak::types::Ref>{
 	let mut scripts=std::vec::Vec::new();
 	recursive_collect_superclass(&mut scripts,dom,dom.root(),"LuaSourceContainer");
 	scripts
 }
--- a/web/.dockerignore
+++ b/web/.dockerignore
@ -0,0 +1,3 @@
 node_modules
 build
 bun.lockb
--- a/web/.gitignore
+++ b/web/.gitignore
@ -0,0 +1,40 @@
 bun.lockb
 # dependencies
 /node_modules
 /.pnp
 .pnp.*
 .yarn/*
 !.yarn/patches
 !.yarn/plugins
 !.yarn/releases
 !.yarn/versions
 # testing
 /coverage
 # next.js
 /.next/
 /out/
 # production
 /build
 # misc
 .DS_Store
 *.pem
 # debug
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 # env files (can opt-in for committing if needed)
 .env*
 # vercel
 .vercel
 # typescript
 *.tsbuildinfo
 next-env.d.ts
--- a/web/Containerfile
+++ b/web/Containerfile
@ -0,0 +1,13 @@
 FROM oven/bun:latest
 WORKDIR /app
 COPY . .
 EXPOSE 3000
 ENV NEXT_TELEMETRY_DISABLED=1
 RUN bun install
 RUN bun run build
 ENTRYPOINT ["bun", "run", "start"]
--- a/web/eslint.config.mjs
+++ b/web/eslint.config.mjs
@ -0,0 +1,16 @@
 import { dirname } from "path";
 import { fileURLToPath } from "url";
 import { FlatCompat } from "@eslint/eslintrc";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 const compat = new FlatCompat({
  baseDirectory: __dirname,
 });
 const eslintConfig = [
  ...compat.extends("next/core-web-vitals", "next/typescript"),
 ];
 export default eslintConfig;
--- a/web/next.config.ts
+++ b/web/next.config.ts
@ -0,0 +1,16 @@
 import type { NextConfig } from "next";
 const nextConfig: NextConfig = {
    distDir: "build",
    output: "standalone",
    rewrites: async () => {
    	return [
     		{
       			source: "/v1/submissions/:submissionid/status/:statustype",
          		destination: "http://mapsservice:8082/v1/submissions/:submissionid/status/:statustype"
       		}
     	]
    }
 };
 export default nextConfig;
--- a/web/package.json
+++ b/web/package.json
@ -0,0 +1,30 @@
 {
  "name": "map-service-web",
  "version": "0.1.0",
  "private": true,
  "scripts": {
    "dev": "next dev -p 3000",
    "build": "next build",
    "start": "next start -p 3000",
    "lint": "next lint"
  },
  "dependencies": {
    "@emotion/react": "^11.14.0",
    "@emotion/styled": "^11.14.0",
    "@mui/icons-material": "^6.1.10",
    "@mui/material": "^6.1.10",
    "next": "^15.1.0",
    "react": "^19.0.0",
    "react-dom": "^19.0.0",
    "sass": "^1.82.0"
  },
  "devDependencies": {
    "typescript": "^5.7.2",
    "@types/node": "^20.17.9",
    "@types/react": "^19.0.1",
    "@types/react-dom": "^19.0.2",
    "eslint": "^9.16.0",
    "eslint-config-next": "15.1.0",
    "@eslint/eslintrc": "^3.2.0"
  }
 }
--- a/web/src/app/_components/header.tsx
+++ b/web/src/app/_components/header.tsx
@ -0,0 +1,31 @@
 import Link from "next/link"
 import "./styles/header.scss"
 interface HeaderButton {
 	name: string,
 	href: string
 }
 function HeaderButton(header: HeaderButton) {
 	return (
 		<Link href={header.href}>
 			<button>{header.name}</button>
 		</Link>
 	)
 }
 export default function Header() {
 	return (
 		<header className="header-bar">
 			<nav className="left">
 				<HeaderButton name="Maps" href=""/>
 			</nav>
 			<nav className="right">
 				<HeaderButton name="Home" href=""/>
 				<HeaderButton name="Need" href=""/>
 				<HeaderButton name="Menu" href=""/>
 				<HeaderButton name="Items" href=""/>
 			</nav>
 		</header>
 	)
 }
--- a/web/src/app/_components/styles/header.scss
+++ b/web/src/app/_components/styles/header.scss
@ -0,0 +1,38 @@
 .header-bar {
 	display: flex;
 	justify-content: space-between;
 	align-items: center;
 	width: 100vw;
 	height: 60px;
 	background: var(--header-grad-left);
 	background: linear-gradient(180deg, var(--header-grad-left) 0%, var(--header-grad-right) 100%);
 	button {
 		background-color: transparent;
 		border: 0;
 		color: var(--header-button-left);
 	}
 	.left {
 		margin-left: 15px;
 		button {
 			font-size: 1.2rem;
 		}
 	}
 	.right {
 		display: flex;
 		gap: 7px;
 		margin-right: 50px;
 		button {
 			font-size: 1rem;
 			color: var(--header-button-right);
 			&:hover {
 				color: var(--header-button-hover)
 			}
 		}
 	}
 }
--- a/web/src/app/_components/webpage.tsx
+++ b/web/src/app/_components/webpage.tsx
@ -0,0 +1,8 @@
 import Header from "./header";
 export default function Webpage({children}: Readonly<{children?: React.ReactNode}>) {
    return (<>
        <Header/>
        {children}
    </>)
 }
--- a/web/src/app/globals.scss
+++ b/web/src/app/globals.scss
@ -0,0 +1,54 @@
 $review-border: 1px solid var(--review-border);
@mixin border-with-radius {
    border: $review-border {
        radius: 5px;
    }
 }
 :root {
 	color-scheme: light dark;
 	--page:                white;
 	--header-grad-left:    #363b40;
 	--header-grad-right:   #353a40;
 	--header-button-left:  white;
 	--header-button-right: #b4b4b4;
 	--header-button-hover: white;
 	--review-border:       #c8c8c8;
 	--text-color:          #1e1e1e;
 	--anchor-link-review:  #008fd6;
 	--window-header:       #f5f5f5;
 	--comment-highlighted: #ffffd7;
 	--comment-area:        white;
 	@media (prefers-color-scheme: dark) {
 		--page:                rgb(15,15,15);
 		--header-grad-left:    #363b40;
 		--header-grad-right:   #353a40;
 		--header-button-left:  white;
 		--header-button-right: #b4b4b4;
 		--header-button-hover: white;
 		--review-border:       rgb(50,50,50);
 		--text-color:          rgb(230,230,230);
 		--anchor-link-review:  #008fd6;
 		--window-header:       rgb(10,10,10);
 		--comment-highlighted: #ffffd7;
 		--comment-area:        rgb(20,20,20);
 	}
 }
 body {
 	font-family: -apple-system, "Segoe UI", system-ui, Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Noto Color Emoji", "Twemoji Mozilla";
 	box-sizing: border-box;
 	margin: 0;
 	background-color: var(--page);
 }
 button {
 	cursor: pointer;
 }
 a:active, a:link, a:hover {
 	text-decoration: none;
 }
--- a/web/src/app/layout.tsx
+++ b/web/src/app/layout.tsx
@ -0,0 +1,9 @@
 import "./globals.scss";
 export default function RootLayout({children}: Readonly<{children: React.ReactNode}>) {
 	return (
 		<html lang="en">
 			<body>{children}</body>
 		</html>
 	);
 }
--- a/web/src/app/page.tsx
+++ b/web/src/app/page.tsx
@ -0,0 +1,7 @@
 import Webpage from "./_components/webpage";
 export default function Home() {
 	return (
 		<Webpage></Webpage>
 	);
 }
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Quaternions	dff37906c6	web: reorder status buttons	2024-12-13 21:22:23 -08:00
Quaternions	50911af656	web: fix proxy	2024-12-13 21:22:23 -08:00
Quaternions	1243203085	web: do not overwrite existing cookie	2024-12-13 21:22:23 -08:00
Quaternions	7ae2775c3f	docker: pass through environment variable	2024-12-13 21:05:33 -08:00
Quaternions	fcd74b54cc	validation: fix writer	2024-12-13 21:05:33 -08:00
Quaternions	b090a80f03	validation: update deps	2024-12-13 21:05:33 -08:00
Quaternions	3a6a62fb7c	nats: periods and underscores are forbidden and cause silent failure	2024-12-13 21:05:33 -08:00
Quaternions	3739ff011e	docker: silence authrpc container logging	2024-12-13 21:05:33 -08:00
Quaternions	046d95c5b3	web: change hardcoded dev address	2024-12-13 21:05:33 -08:00
Quaternions	090c794c24	docker: use images instead of build	2024-12-13 21:05:33 -08:00
Quaternions	4373ca4ba9	validation: print payload	2024-12-12 19:27:39 -08:00
Quaternions	f77dd14ac9	validation: parallel request processing	2024-12-12 19:27:39 -08:00
Quaternions	727e358cf9	validation: connect to nats and grpc concurrently	2024-12-12 17:52:43 -08:00
Quaternions	8250686477	validation: refactor to use a single consumer	2024-12-12 17:52:43 -08:00
Quaternions	1f96b5facb	validation: incorrect nats assumption	2024-12-12 16:58:16 -08:00
Quaternions	22086e772c	validation: listen for sigkill	2024-12-12 16:58:16 -08:00
Quaternions	c99608aaff	docker: add all 8 services to single compose file	2024-12-12 16:50:48 -08:00
itzaname	fdc1f1aadf	Unquatification	2024-12-12 17:29:20 -05:00
rhpidfyre	3c0028f308	web: working Container file	2024-12-12 14:24:07 -08:00
rhpidfyre	a2c6981d36	web: proxy the dev port 3000 to 8081 for api calls	2024-12-12 14:24:07 -08:00
rhpidfyre	d37cc9cdf2	CSS variables for coloring	2024-12-12 14:24:07 -08:00
Quaternions	0eaf9aa164	docker: fix validation	2024-12-12 14:24:07 -08:00
Quaternions	d37964764e	docker: fix maps-service	2024-12-12 14:24:07 -08:00
Quaternions	55b5516782	docker: secrets!	2024-12-12 13:52:25 -08:00
Quaternions	4c5d9e420d	validation: fix cargo chef	2024-12-12 12:51:44 -08:00
Quaternions	dee563e12a	update docker stuff	2024-12-12 12:29:15 -08:00
Quaternions	5ef2de6f50	validation: add strafesnet registry	2024-12-12 12:29:12 -08:00
Quaternions	95e9b4d8b3	nats: work queue policy	2024-12-11 23:02:59 -08:00
Quaternions	eea57786ff	nats: use subjects	2024-12-11 21:08:04 -08:00
Quaternions	64d6fe6059	validation: consumers are not durable	2024-12-11 21:07:57 -08:00
Quaternions	7f1054d509	maps-service: nats jetstream	2024-12-11 19:56:09 -08:00
Quaternions	ecaff95ca7	validation: nats jetstream	2024-12-11 19:55:16 -08:00
Quaternions	7c2e8f00ad	web: custom action per review button	2024-12-11 18:11:36 -08:00
Quaternions	1a747bee80	openapi: rename unclear endpoints	2024-12-11 18:11:36 -08:00
Quaternions	a9a4eaa20d	validation: implement publish_fix	2024-12-11 18:11:36 -08:00
Quaternions	796935da86	validation: implement publish_new	2024-12-11 17:45:38 -08:00
Quaternions	6677a698be	plumb game id	2024-12-11 17:45:38 -08:00
rhpidfyre	aea340fe97	Submission buttons working?	2024-12-11 19:07:54 -05:00
Quaternions	2a04efb10b	change error message to make more sense	2024-12-11 15:39:10 -08:00
rhpidfyre	119bb79a88	Update readme for web	2024-12-11 18:36:47 -05:00
rhpidfyre	c630b44ad3	Containerfile for web	2024-12-11 17:07:15 -05:00
rhpidfyre	bc5b84d447	buttons exist for making api requests	2024-12-11 03:30:55 -05:00
Quaternions	89fda96e7a	implicitly assume validator endpoints are authorized	2024-12-10 22:32:56 -08:00
Quaternions	803223d331	validation: fix url	2024-12-10 22:29:15 -08:00
Quaternions	dad5a40a09	validation: fix method	2024-12-10 22:28:52 -08:00
Quaternions	88056344f4	openapi: generate	2024-12-10 22:23:08 -08:00
Quaternions	0bc8eeffb3	openapi: set http return code according to standard	2024-12-10 22:22:37 -08:00
Quaternions	afa78a1260	openapi: implement cookie auth only on select requests	2024-12-10 22:22:12 -08:00
Quaternions	590627870a	implement some basic status codes for errors	2024-12-10 21:49:03 -08:00
Quaternions	ca5c67cb4b	check rows affected to see if anything happened	2024-12-10 21:38:12 -08:00
Quaternions	e3360a6c6b	the gorm way	2024-12-10 21:31:18 -08:00
Quaternions	1975f3ea4a	validation: mtls is handled at a higher level	2024-12-10 21:25:53 -08:00
Quaternions	03e71f09fc	validation: golang public fields must be upper case gg	2024-12-10 20:25:40 -08:00
rhpidfyre	1d545f4413	explicitly specify the port for bun run start	2024-12-10 23:17:58 -05:00
rhpidfyre	2e379f7077	successfully builds for production	2024-12-10 23:01:22 -05:00
rhpidfyre	6ce2cd799f	update README for web	2024-12-10 22:59:13 -05:00
Quaternions	305f18adb3	send nats dunk on golang	2024-12-10 19:27:15 -08:00
Quaternions	e185712da5	nasty	2024-12-10 19:25:21 -08:00
Quaternions	3e58d75b87	userids and asset ids are uint64	2024-12-10 19:25:21 -08:00
Quaternions	b49ae10a10	fix roles	2024-12-10 18:23:23 -08:00
Quaternions	24e88c5a0a	validation: change error enum names to be more descriptive	2024-12-10 17:47:17 -08:00
Quaternions	c029939ee2	validation: use environment variables	2024-12-10 17:39:08 -08:00
Quaternions	dedbdb2899	validation: silence "unused" code lint	2024-12-10 17:38:47 -08:00
Quaternions	1324fa106f	validation: use incremental model version id	2024-12-10 17:38:21 -08:00
Quaternions	f110d82402	docker compose	2024-12-10 17:03:18 -08:00
rhpidfyre	cf488101a0	add eslint + update nextjs to remove a library deprecation warning on dev start * requires running `bun install` again, or `bun update`	2024-12-10 17:55:16 -05:00
rhpidfyre	fbc183f408	change the routing from DOMAIN/map/[map_name] to DOMAIN/submissions/[submission_id]	2024-12-10 17:53:57 -05:00
rhpidfyre	1a5f58a3b1	map page now builds and heavily refactored + Handle no commenters by displaying the message "There are no commenters." + Text fallback: "Fetching map image..." + Handle the validation status message (still has no css coloring for 80% of the statuses) - Disable the roblox api for fetching the asset image and avatar headshot images, but keep the module	2024-12-10 03:54:19 -05:00
Quaternions	37e4e29f04	use gorm model	2024-12-09 22:27:52 -08:00
Quaternions	69047eacb0	update golang side	2024-12-09 22:09:52 -08:00
Quaternions	ccb9c17e7f	openapi: generate	2024-12-09 22:07:43 -08:00
Quaternions	7b343fc686	openapi: deduplicate parameter ids	2024-12-09 22:05:47 -08:00
Quaternions	7aaa89b69b	openapi: change patch to post	2024-12-09 21:57:35 -08:00
Quaternions	3cc1c8a5d9	openapi: limit string lengths for user facing objects	2024-12-09 21:48:52 -08:00
Quaternions	04520edca7	fix IfStatusThenUpdate	2024-12-09 21:38:27 -08:00
Quaternions	fe3562325f	fix user info	2024-12-09 21:38:27 -08:00
Quaternions	b3ba9c2301	openapi: unused	2024-12-09 21:38:27 -08:00
Quaternions	1c0ed6574f	openapi: remove redundant SubmissionType	2024-12-09 20:51:00 -08:00
Quaternions	576c3a187a	produce less garbage	2024-12-09 20:10:36 -08:00
Quaternions	e495a8423f	openapi: try session_id	2024-12-09 20:10:36 -08:00
Quaternions	fb6b0ad7c7	cli flag for auth rpc host	2024-12-09 19:33:01 -08:00
rhpidfyre	8c3e9cf9ea	remove empty readme and tweak .gitignore, next.config.ts, and package.json	2024-12-09 22:24:16 -05:00
Quaternions	76792fd144	README: write instructions for each component	2024-12-09 18:35:49 -08:00
Quaternions	9097c551c4	not using openapi-generator (it's java)	2024-12-09 18:28:44 -08:00
Quaternions	0b46ee28a4	open source	2024-12-09 18:16:07 -08:00
rhpidfyre	6adf9a8977	web folder (dont use this code)	2024-12-09 21:14:54 -05:00
Quaternions	fe6a88a479	tweak submission comment	2024-12-09 17:34:55 -08:00
Quaternions	c3b559f6a6	tweak openapi description	2024-12-09 17:34:46 -08:00
Quaternions	dac135f624	partially implement publish_new	2024-12-06 21:00:19 -08:00
Quaternions	2aacb4c87c	split publishing for new maps and map fixes	2024-12-06 20:31:28 -08:00
Quaternions	f46df3a8eb	apparently you can just do it, thanks rust	2024-12-06 20:07:15 -08:00
Quaternions	bf3698c1db	tweak comment	2024-12-06 19:47:06 -08:00
Quaternions	a019e61556	remove unnecessary data structure	2024-12-06 19:45:44 -08:00
Quaternions	572e51961c	validation: mark submission as validated	2024-12-06 19:43:06 -08:00
Quaternions	3289376f8e	rust api: action_submission_validate	2024-12-06 19:43:06 -08:00
Quaternions	f99dbb1b9d	fallible functions cannot exist in the error suppressor	2024-12-06 19:43:06 -08:00
Quaternions	1a5e6e90c6	presumptuously rename error	2024-12-06 19:36:10 -08:00
Quaternions	c77a34804d	i64 😭	2024-12-06 19:27:20 -08:00
Quaternions	b7d04da9e0	rust api: implement update_submission_model	2024-12-06 19:19:01 -08:00
Quaternions	1133e00ccc	fix api	2024-12-06 19:02:57 -08:00
Quaternions	56fefbe52d	fat concurrent script fetching	2024-12-06 18:59:33 -08:00
Quaternions	0977943834	fix hash	2024-12-06 18:57:11 -08:00
Quaternions	bc6613f235	implement script policy	2024-12-06 18:19:35 -08:00
Quaternions	33ea38d35f	unused	2024-12-06 18:19:35 -08:00
Quaternions	86121bbfc1	implement siphash (confirmed identical hash)	2024-12-06 18:19:35 -08:00
Quaternions	a97738b378	implement scripts crud	2024-12-05 20:26:51 -08:00
Quaternions	2dcae799da	script always has a SubmissionID, it's just 0	2024-12-05 20:26:27 -08:00
Quaternions	ee7e5371a8	tweak roles	2024-12-05 19:10:09 -08:00
Quaternions	0c2ee16bde	openapi: not optional	2024-12-05 18:56:44 -08:00
Quaternions	005f2ddaee	rust api: patch	2024-12-05 18:49:09 -08:00
Quaternions	329eb1663c	new api skeleton	2024-12-05 16:50:35 -08:00
Quaternions	80425813c3	fix non-optional values	2024-12-05 16:50:35 -08:00
Quaternions	5899efd759	openapi: generate	2024-12-05 16:50:35 -08:00
Quaternions	3b85c98e10	openapi: massive crud	2024-12-05 16:50:35 -08:00
Quaternions	1a48a4fb5a	tweak policy	2024-12-05 16:50:35 -08:00
Quaternions	8f74a3f783	common service errors	2024-12-05 16:50:35 -08:00
Quaternions	8c254aef6e	scripts & script policy	2024-12-05 16:50:35 -08:00
Quaternions	e7375cde11	openapi: script stuff	2024-12-04 19:07:40 -08:00
Quaternions	4ed70dbcad	custom rust api client for maps-service	2024-12-04 19:07:40 -08:00
Quaternions	a457faef56	delete openapi-generator rust code - it's awful and doesn't even compile	2024-12-04 19:04:14 -08:00
Quaternions	0d2c412fd4	add reflection database back, not making a strafesnet roblox map lib	2024-12-04 19:00:31 -08:00
Quaternions	d0e6233d68	scripts can be rejected lol	2024-12-03 20:23:06 -08:00
Quaternions	ce5d84a646	openapi: add scripts operations	2024-12-03 19:29:59 -08:00
Quaternions	799346aee6	openapi: remove junk	2024-12-03 19:29:50 -08:00
Quaternions	6a6e68e8df	add api dependency	2024-12-03 19:18:40 -08:00
Quaternions	42935ce990	generate api for rust	2024-12-03 19:13:29 -08:00
Quaternions	dd193e6e8f	wip: write some script validation code	2024-12-03 18:54:33 -08:00
Quaternions	dc7645319e	remove sqlx	2024-12-03 17:43:37 -08:00
Quaternions	fad27b6792	do not reply with nats	2024-12-03 17:37:33 -08:00
Quaternions	6c3942e37d	cloud only needed to upload places	2024-12-02 23:34:25 -08:00
Quaternions	1124f8adea	wip: validator	2024-12-02 23:27:58 -08:00
Quaternions	92fe223d96	json	2024-12-02 23:27:58 -08:00
Quaternions	895a3f1249	validator can invalidate	2024-12-02 22:52:17 -08:00
Quaternions	c7f3cdc0d6	the natsy	2024-12-02 22:36:44 -08:00
Quaternions	7375842089	prep deps	2024-12-02 22:09:51 -08:00
Quaternions	ade10e8476	reuse validated model for multiple review cycles	2024-12-02 18:23:15 -08:00
Quaternions	ec5f225866	auth	2024-11-29 15:39:47 -08:00
Quaternions	1933a0914a	openapi cookie	2024-11-29 15:39:47 -08:00
Quaternions	f3b41c6b25	read itzaname code and simplify wacky string stuff	2024-11-27 22:47:30 -08:00
Quaternions	712ff32552	fixup: api: SubmissionCreate in request body	2024-11-27 19:22:42 -08:00
Quaternions	bb46697277	pseudocode	2024-11-27 19:06:21 -08:00
Quaternions	86204e877e	use transaction check for PatchSubmissionModel	2024-11-27 19:06:21 -08:00
Quaternions	f5fb895aeb	construct transactional update	2024-11-27 18:58:49 -08:00
Quaternions	f4fea2963d	implement status actions	2024-11-27 18:19:19 -08:00
Quaternions	cdd9488ace	prepend status with namespacing bruh golang moment	2024-11-27 17:59:29 -08:00
Quaternions	b31a8a90ff	generate and edit submissions interface	2024-11-27 17:48:01 -08:00
Quaternions	414731dea4	model each action with its own request	2024-11-27 17:44:42 -08:00
Quaternions	b085b244fe	status action template	2024-11-27 17:44:42 -08:00
Quaternions	6f4df29d2e	allow submitter to revoke submission	2024-11-27 17:32:49 -08:00
Quaternions	e68d78bcb7	notes about permissions	2024-11-27 17:28:11 -08:00
Quaternions	23ffa45db2	submission Status enum	2024-11-27 17:28:11 -08:00
Quaternions	1984dd00bc	completed is set to false when the model updates	2024-11-27 17:28:11 -08:00
Quaternions	680c21ca11	completed is implicitly true	2024-11-27 17:27:50 -08:00
Quaternions	1119c91da3	implement patch methods	2024-11-27 16:47:28 -08:00
Quaternions	1af6962b12	implement ListSubmissions	2024-11-27 16:38:22 -08:00
Quaternions	acece12737	api: SubmissionCreate in request body	2024-11-27 16:13:55 -08:00
Quaternions	f7aff4bbaa	change api to do IdMessage	2024-11-27 16:13:43 -08:00
Quaternions	f87c4dab8f	hooray functions copy pasted	2024-11-27 16:12:05 -08:00
Quaternions	b8cb49c1cb	where is v1	2024-11-26 16:13:20 -08:00
Quaternions	2504572cb3	fix port	2024-11-26 16:06:43 -08:00
Quaternions	1bfec3d35e	fix migrate	2024-11-26 15:59:52 -08:00
Quaternions	cf9cb7c6c3	implement GetSubmission	2024-11-26 15:55:56 -08:00
Quaternions	b05a4d5659	modify Submission struct	2024-11-26 15:55:50 -08:00
Quaternions	66ddcbabd6	run generate	2024-11-26 15:43:54 -08:00
Quaternions	6fefd90c91	extend submission object	2024-11-26 15:41:13 -08:00
itzaname	4c3c42143e	Missing changes	2024-11-26 18:30:58 -05:00
itzaname	8bcb8d3f20	Refactor 😮‍💨	2024-11-26 18:28:48 -05:00
		`@ -1,3 +0,0 @@`
			`// Code generated by ogen, DO NOT EDIT.`

			`package api`
`@ -1,3 +1,3 @@`
	`package main`	`package main`

	`//go:generate go run github.com/ogen-go/ogen/cmd/ogen@latest --target api --clean openapi.yaml`	`//go:generate go run github.com/ogen-go/ogen/cmd/ogen@latest --target pkg/api --clean openapi.yaml`
		`@ -0,0 +1,2 @@`
							`[registries.strafesnet]`
							`index = "sparse+https://git.itzana.me/api/packages/strafesnet/cargo/"`