diff --git a/lib/src/generated/chain/v1/hub.pb.dart b/lib/src/generated/chain/v1/hub.pb.dart
index dad3c65..1284e45 100644
--- a/lib/src/generated/chain/v1/hub.pb.dart
+++ b/lib/src/generated/chain/v1/hub.pb.dart
@@ -5493,6 +5493,7 @@ class StoreEntry extends $pb.GeneratedMessage {
     $core.String? canonicalCategoryLabel,
     $core.String? installVerification,
     $core.Iterable<$core.String>? maintainers,
+    DataSource? dataSource,
   }) {
     final result = create();
     if (name != null) result.name = name;
@@ -5525,6 +5526,7 @@ class StoreEntry extends $pb.GeneratedMessage {
     if (installVerification != null)
       result.installVerification = installVerification;
     if (maintainers != null) result.maintainers.addAll(maintainers);
+    if (dataSource != null) result.dataSource = dataSource;
     return result;
   }
 
@@ -5567,6 +5569,8 @@ class StoreEntry extends $pb.GeneratedMessage {
     ..aOS(24, _omitFieldNames ? '' : 'canonicalCategoryLabel')
     ..aOS(25, _omitFieldNames ? '' : 'installVerification')
     ..pPS(26, _omitFieldNames ? '' : 'maintainers')
+    ..aOM<DataSource>(27, _omitFieldNames ? '' : 'dataSource',
+        subBuilder: DataSource.create)
     ..hasRequiredFields = false;
 
   @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
@@ -5860,6 +5864,122 @@ class StoreEntry extends $pb.GeneratedMessage {
   /// any — clients render an honest "not specified".
   @$pb.TagNumber(26)
   $pb.PbList<$core.String> get maintainers => $_getList(25);
+
+  /// Where the module's data comes from, for `source.*` capabilities.
+  /// Absent for every other module: a text splitter reaches no
+  /// third-party material and has no provenance to declare.
+  @$pb.TagNumber(27)
+  DataSource get dataSource => $_getN(26);
+  @$pb.TagNumber(27)
+  set dataSource(DataSource value) => $_setField(27, value);
+  @$pb.TagNumber(27)
+  $core.bool hasDataSource() => $_has(26);
+  @$pb.TagNumber(27)
+  void clearDataSource() => $_clearField(27);
+  @$pb.TagNumber(27)
+  DataSource ensureDataSource() => $_ensure(26);
+}
+
+/// Provenance of the material a `source.*` module fetches.
+///
+/// Separate from the module's own licence, which covers its code. A
+/// module can be Apache-2.0 while the corpus it reaches is
+/// public-domain statute, CC-BY, or licence-gated. Clients show this
+/// before the install button so an operator sees the terms they are
+/// taking on.
+class DataSource extends $pb.GeneratedMessage {
+  factory DataSource({
+    $core.String? name,
+    $core.String? url,
+    $core.String? license,
+    $core.String? attribution,
+  }) {
+    final result = create();
+    if (name != null) result.name = name;
+    if (url != null) result.url = url;
+    if (license != null) result.license = license;
+    if (attribution != null) result.attribution = attribution;
+    return result;
+  }
+
+  DataSource._();
+
+  factory DataSource.fromBuffer($core.List<$core.int> data,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromBuffer(data, registry);
+  factory DataSource.fromJson($core.String json,
+          [$pb.ExtensionRegistry registry = $pb.ExtensionRegistry.EMPTY]) =>
+      create()..mergeFromJson(json, registry);
+
+  static final $pb.BuilderInfo _i = $pb.BuilderInfo(
+      _omitMessageNames ? '' : 'DataSource',
+      package: const $pb.PackageName(_omitMessageNames ? '' : 'chain.v1'),
+      createEmptyInstance: create)
+    ..aOS(1, _omitFieldNames ? '' : 'name')
+    ..aOS(2, _omitFieldNames ? '' : 'url')
+    ..aOS(3, _omitFieldNames ? '' : 'license')
+    ..aOS(4, _omitFieldNames ? '' : 'attribution')
+    ..hasRequiredFields = false;
+
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DataSource clone() => deepCopy();
+  @$core.Deprecated('See https://github.com/google/protobuf.dart/issues/998.')
+  DataSource copyWith(void Function(DataSource) updates) =>
+      super.copyWith((message) => updates(message as DataSource)) as DataSource;
+
+  @$core.override
+  $pb.BuilderInfo get info_ => _i;
+
+  @$core.pragma('dart2js:noInline')
+  static DataSource create() => DataSource._();
+  @$core.override
+  DataSource createEmptyInstance() => create();
+  @$core.pragma('dart2js:noInline')
+  static DataSource getDefault() => _defaultInstance ??=
+      $pb.GeneratedMessage.$_defaultFor<DataSource>(create);
+  static DataSource? _defaultInstance;
+
+  /// Publisher, as a person would name it.
+  @$pb.TagNumber(1)
+  $core.String get name => $_getSZ(0);
+  @$pb.TagNumber(1)
+  set name($core.String value) => $_setString(0, value);
+  @$pb.TagNumber(1)
+  $core.bool hasName() => $_has(0);
+  @$pb.TagNumber(1)
+  void clearName() => $_clearField(1);
+
+  /// Canonical URL of the upstream source.
+  @$pb.TagNumber(2)
+  $core.String get url => $_getSZ(1);
+  @$pb.TagNumber(2)
+  set url($core.String value) => $_setString(1, value);
+  @$pb.TagNumber(2)
+  $core.bool hasUrl() => $_has(1);
+  @$pb.TagNumber(2)
+  void clearUrl() => $_clearField(2);
+
+  /// Terms in plain words, not SPDX: the material often carries no
+  /// software licence at all.
+  @$pb.TagNumber(3)
+  $core.String get license => $_getSZ(2);
+  @$pb.TagNumber(3)
+  set license($core.String value) => $_setString(2, value);
+  @$pb.TagNumber(3)
+  $core.bool hasLicense() => $_has(2);
+  @$pb.TagNumber(3)
+  void clearLicense() => $_clearField(3);
+
+  /// Attribution the operator must carry with the output. Empty when
+  /// the upstream requires none.
+  @$pb.TagNumber(4)
+  $core.String get attribution => $_getSZ(3);
+  @$pb.TagNumber(4)
+  set attribution($core.String value) => $_setString(3, value);
+  @$pb.TagNumber(4)
+  $core.bool hasAttribution() => $_has(3);
+  @$pb.TagNumber(4)
+  void clearAttribution() => $_clearField(4);
 }
 
 class ChannelStatusResponse extends $pb.GeneratedMessage {
diff --git a/lib/src/generated/chain/v1/hub.pbjson.dart b/lib/src/generated/chain/v1/hub.pbjson.dart
index 8374ea2..42c136f 100644
--- a/lib/src/generated/chain/v1/hub.pbjson.dart
+++ b/lib/src/generated/chain/v1/hub.pbjson.dart
@@ -1481,6 +1481,19 @@ const StoreEntry$json = {
       '10': 'installVerification'
     },
     {'1': 'maintainers', '3': 26, '4': 3, '5': 9, '10': 'maintainers'},
+    {
+      '1': 'data_source',
+      '3': 27,
+      '4': 1,
+      '5': 11,
+      '6': '.chain.v1.DataSource',
+      '9': 0,
+      '10': 'dataSource',
+      '17': true
+    },
+  ],
+  '8': [
+    {'1': '_data_source'},
   ],
 };
 
@@ -1501,7 +1514,25 @@ final $typed_data.Uint8List storeEntryDescriptor = $convert.base64Decode(
     'aW5kEhYKBnNvdXJjZRgWIAEoCVIGc291cmNlEi0KEmNhbm9uaWNhbF9jYXRlZ29yeRgXIAEoCV'
     'IRY2Fub25pY2FsQ2F0ZWdvcnkSOAoYY2Fub25pY2FsX2NhdGVnb3J5X2xhYmVsGBggASgJUhZj'
     'YW5vbmljYWxDYXRlZ29yeUxhYmVsEjEKFGluc3RhbGxfdmVyaWZpY2F0aW9uGBkgASgJUhNpbn'
-    'N0YWxsVmVyaWZpY2F0aW9uEiAKC21haW50YWluZXJzGBogAygJUgttYWludGFpbmVycw==');
+    'N0YWxsVmVyaWZpY2F0aW9uEiAKC21haW50YWluZXJzGBogAygJUgttYWludGFpbmVycxI6Cgtk'
+    'YXRhX3NvdXJjZRgbIAEoCzIULmNoYWluLnYxLkRhdGFTb3VyY2VIAFIKZGF0YVNvdXJjZYgBAU'
+    'IOCgxfZGF0YV9zb3VyY2U=');
+
+@$core.Deprecated('Use dataSourceDescriptor instead')
+const DataSource$json = {
+  '1': 'DataSource',
+  '2': [
+    {'1': 'name', '3': 1, '4': 1, '5': 9, '10': 'name'},
+    {'1': 'url', '3': 2, '4': 1, '5': 9, '10': 'url'},
+    {'1': 'license', '3': 3, '4': 1, '5': 9, '10': 'license'},
+    {'1': 'attribution', '3': 4, '4': 1, '5': 9, '10': 'attribution'},
+  ],
+};
+
+/// Descriptor for `DataSource`. Decode as a `google.protobuf.DescriptorProto`.
+final $typed_data.Uint8List dataSourceDescriptor = $convert.base64Decode(
+    'CgpEYXRhU291cmNlEhIKBG5hbWUYASABKAlSBG5hbWUSEAoDdXJsGAIgASgJUgN1cmwSGAoHbG'
+    'ljZW5zZRgDIAEoCVIHbGljZW5zZRIgCgthdHRyaWJ1dGlvbhgEIAEoCVILYXR0cmlidXRpb24=');
 
 @$core.Deprecated('Use channelStatusResponseDescriptor instead')
 const ChannelStatusResponse$json = {