@evalops/sdk-ts 0.1.112 → 0.1.114

package/dist/console/v1/console_pb.d.ts

@@ -327,6 +327,102 @@ export type ListCostUsageResponse = Message<"console.v1.ListCostUsageResponse">
  * Use `create(ListCostUsageResponseSchema)` to create a new message.
  */
 export declare const ListCostUsageResponseSchema: GenMessage<ListCostUsageResponse>;
+/**
+ * @generated from message console.v1.ListAuthorityPostureRequest
+ */
+export type ListAuthorityPostureRequest = Message<"console.v1.ListAuthorityPostureRequest"> & {
+    /**
+     * @generated from field: console.v1.ConsoleQuery query = 1;
+     */
+    query?: ConsoleQuery | undefined;
+};
+/**
+ * Describes the message console.v1.ListAuthorityPostureRequest.
+ * Use `create(ListAuthorityPostureRequestSchema)` to create a new message.
+ */
+export declare const ListAuthorityPostureRequestSchema: GenMessage<ListAuthorityPostureRequest>;
+/**
+ * @generated from message console.v1.ListAuthorityPostureResponse
+ */
+export type ListAuthorityPostureResponse = Message<"console.v1.ListAuthorityPostureResponse"> & {
+    /**
+     * @generated from field: repeated console.v1.AuthorityLedger rows = 1;
+     */
+    rows: AuthorityLedger[];
+    /**
+     * @generated from field: int32 total = 2;
+     */
+    total: number;
+    /**
+     * @generated from field: bool has_more = 3;
+     */
+    hasMore: boolean;
+    /**
+     * @generated from field: repeated string warnings = 4;
+     */
+    warnings: string[];
+};
+/**
+ * Describes the message console.v1.ListAuthorityPostureResponse.
+ * Use `create(ListAuthorityPostureResponseSchema)` to create a new message.
+ */
+export declare const ListAuthorityPostureResponseSchema: GenMessage<ListAuthorityPostureResponse>;
+/**
+ * @generated from message console.v1.ListAgentWorkforceRecordsRequest
+ */
+export type ListAgentWorkforceRecordsRequest = Message<"console.v1.ListAgentWorkforceRecordsRequest"> & {
+    /**
+     * @generated from field: console.v1.ConsoleQuery query = 1;
+     */
+    query?: ConsoleQuery | undefined;
+    /**
+     * @generated from field: string organization_id = 2;
+     */
+    organizationId: string;
+    /**
+     * @generated from field: string runtime = 3;
+     */
+    runtime: string;
+    /**
+     * @generated from field: string queue_state = 4;
+     */
+    queueState: string;
+    /**
+     * @generated from field: bool include_debug = 5;
+     */
+    includeDebug: boolean;
+};
+/**
+ * Describes the message console.v1.ListAgentWorkforceRecordsRequest.
+ * Use `create(ListAgentWorkforceRecordsRequestSchema)` to create a new message.
+ */
+export declare const ListAgentWorkforceRecordsRequestSchema: GenMessage<ListAgentWorkforceRecordsRequest>;
+/**
+ * @generated from message console.v1.ListAgentWorkforceRecordsResponse
+ */
+export type ListAgentWorkforceRecordsResponse = Message<"console.v1.ListAgentWorkforceRecordsResponse"> & {
+    /**
+     * @generated from field: repeated console.v1.AgentWorkforceRecord records = 1;
+     */
+    records: AgentWorkforceRecord[];
+    /**
+     * @generated from field: int32 total = 2;
+     */
+    total: number;
+    /**
+     * @generated from field: bool has_more = 3;
+     */
+    hasMore: boolean;
+    /**
+     * @generated from field: repeated string warnings = 4;
+     */
+    warnings: string[];
+};
+/**
+ * Describes the message console.v1.ListAgentWorkforceRecordsResponse.
+ * Use `create(ListAgentWorkforceRecordsResponseSchema)` to create a new message.
+ */
+export declare const ListAgentWorkforceRecordsResponseSchema: GenMessage<ListAgentWorkforceRecordsResponse>;
 /**
  * @generated from message console.v1.ListFindingsRequest
  */
@@ -1058,286 +1154,1062 @@ export type CostUsage = Message<"console.v1.CostUsage"> & {
  */
 export declare const CostUsageSchema: GenMessage<CostUsage>;
 /**
- * @generated from message console.v1.RiskFinding
+ * @generated from message console.v1.AuthorityLedger
  */
-export type RiskFinding = Message<"console.v1.RiskFinding"> & {
+export type AuthorityLedger = Message<"console.v1.AuthorityLedger"> & {
     /**
      * @generated from field: string id = 1;
      */
     id: string;
     /**
-     * @generated from field: string title = 2;
+     * @generated from field: string trace_id = 2;
      */
-    title: string;
+    traceId: string;
     /**
-     * @generated from field: string detail = 3;
+     * @generated from field: string span_id = 3;
      */
-    detail: string;
+    spanId: string;
     /**
-     * @generated from field: string source = 4;
+     * @generated from field: string action_id = 4;
      */
-    source: string;
+    actionId: string;
     /**
-     * @generated from field: string asset_id = 5;
+     * @generated from field: string approval_id = 5;
      */
-    assetId: string;
+    approvalId: string;
     /**
-     * @generated from field: string status = 6;
+     * @generated from field: string cost_row_id = 6;
      */
-    status: string;
+    costRowId: string;
     /**
-     * @generated from field: common.v1.RiskLevel risk_level = 7;
+     * @generated from field: string agent_id = 7;
      */
-    riskLevel: RiskLevel;
+    agentId: string;
     /**
-     * @generated from field: string policy = 8;
+     * @generated from field: string agent_name = 8;
      */
-    policy: string;
+    agentName: string;
     /**
-     * @generated from field: string next_action = 9;
+     * @generated from field: string run_as_identity = 9;
      */
-    nextAction: string;
+    runAsIdentity: string;
     /**
-     * @generated from field: google.protobuf.Timestamp detected_at = 10;
+     * @generated from field: string tool_id = 10;
      */
-    detectedAt?: Timestamp | undefined;
-};
-/**
- * Describes the message console.v1.RiskFinding.
- * Use `create(RiskFindingSchema)` to create a new message.
- */
-export declare const RiskFindingSchema: GenMessage<RiskFinding>;
-/**
- * @generated from message console.v1.IntegrationTile
- */
-export type IntegrationTile = Message<"console.v1.IntegrationTile"> & {
+    toolId: string;
     /**
-     * @generated from field: string id = 1;
+     * @generated from field: string tool_name = 11;
      */
-    id: string;
+    toolName: string;
     /**
-     * @generated from field: string name = 2;
+     * @generated from field: string connector_id = 12;
      */
-    name: string;
+    connectorId: string;
     /**
-     * @generated from field: string provider = 3;
+     * @generated from field: string connector_name = 13;
      */
-    provider: string;
+    connectorName: string;
     /**
-     * @generated from field: string category = 4;
+     * @generated from field: string connector_provider = 14;
      */
-    category: string;
+    connectorProvider: string;
     /**
-     * @generated from field: string status = 5;
+     * @generated from field: string credential_ref = 15;
      */
-    status: string;
+    credentialRef: string;
     /**
-     * @generated from field: string detail = 6;
+     * @generated from field: string grant_lease_id = 16;
      */
-    detail: string;
+    grantLeaseId: string;
     /**
-     * @generated from field: string setup_command = 7;
+     * @generated from field: string authority_id = 17;
      */
-    setupCommand: string;
+    authorityId: string;
     /**
-     * @generated from field: repeated string scopes = 8;
+     * @generated from field: string authority_label = 18;
      */
-    scopes: string[];
+    authorityLabel: string;
     /**
-     * @generated from field: repeated string capabilities = 9;
+     * authority_type is a product category such as credential, connector_grant,
+     * service_account, browser_session, runner_lease, or unknown.
+     *
+     * @generated from field: string authority_type = 19;
      */
-    capabilities: string[];
+    authorityType: string;
     /**
-     * @generated from field: google.protobuf.Timestamp last_seen_at = 10;
+     * @generated from field: string authority_scope = 20;
      */
-    lastSeenAt?: Timestamp | undefined;
-};
-/**
- * Describes the message console.v1.IntegrationTile.
- * Use `create(IntegrationTileSchema)` to create a new message.
- */
-export declare const IntegrationTileSchema: GenMessage<IntegrationTile>;
-/**
- * @generated from message console.v1.OnboardingTask
- */
-export type OnboardingTask = Message<"console.v1.OnboardingTask"> & {
+    authorityScope: string;
     /**
-     * @generated from field: string id = 1;
+     * @generated from field: string issuer = 21;
      */
-    id: string;
+    issuer: string;
     /**
-     * @generated from field: string title = 2;
+     * @generated from field: google.protobuf.Timestamp expires_at = 22;
      */
-    title: string;
+    expiresAt?: Timestamp | undefined;
     /**
-     * @generated from field: string detail = 3;
+     * authority_state is one of active, expired, revoked, missing, or unknown.
+     *
+     * @generated from field: string authority_state = 23;
      */
-    detail: string;
+    authorityState: string;
     /**
-     * @generated from field: string status = 4;
+     * attestation_state is one of attested, unverified, missing, or unknown.
+     *
+     * @generated from field: string attestation_state = 24;
      */
-    status: string;
+    attestationState: string;
     /**
-     * @generated from field: string cta_label = 5;
+     * @generated from field: string attestation_summary = 25;
      */
-    ctaLabel: string;
+    attestationSummary: string;
     /**
-     * @generated from field: string command = 6;
+     * trust_state is one of trusted, needs_review, unverified, blocked, or unknown.
+     *
+     * @generated from field: string trust_state = 26;
      */
-    command: string;
+    trustState: string;
     /**
-     * @generated from field: repeated string required_integrations = 7;
+     * evidence_state is one of ready, pending, missing, warning, blocked, or unknown.
+     *
+     * @generated from field: string evidence_state = 27;
      */
-    requiredIntegrations: string[];
-};
-/**
- * Describes the message console.v1.OnboardingTask.
- * Use `create(OnboardingTaskSchema)` to create a new message.
- */
-export declare const OnboardingTaskSchema: GenMessage<OnboardingTask>;
-/**
- * @generated from message console.v1.TraceDrilldown
- */
-export type TraceDrilldown = Message<"console.v1.TraceDrilldown"> & {
+    evidenceState: string;
     /**
-     * @generated from field: string trace_id = 1;
+     * @generated from field: string evidence_source = 28;
      */
-    traceId: string;
+    evidenceSource: string;
     /**
-     * @generated from field: string root_name = 2;
+     * @generated from field: string cost_posture = 29;
      */
-    rootName: string;
+    costPosture: string;
     /**
-     * @generated from field: string asset_id = 3;
+     * @generated from field: double cost_usd = 30;
      */
-    assetId: string;
+    costUsd: number;
     /**
-     * @generated from field: string status = 4;
+     * @generated from field: int64 input_tokens = 31;
      */
-    status: string;
+    inputTokens: bigint;
     /**
-     * @generated from field: int64 total_latency_ms = 5;
+     * @generated from field: int64 output_tokens = 32;
      */
-    totalLatencyMs: bigint;
+    outputTokens: bigint;
     /**
-     * @generated from field: int64 input_tokens = 6;
+     * @generated from field: string status = 33;
      */
-    inputTokens: bigint;
+    status: string;
     /**
-     * @generated from field: int64 output_tokens = 7;
+     * @generated from field: string policy_reason = 34;
      */
-    outputTokens: bigint;
+    policyReason: string;
     /**
-     * @generated from field: double cost_usd = 8;
+     * @generated from field: repeated string required_evidence = 35;
      */
-    costUsd: number;
+    requiredEvidence: string[];
     /**
-     * @generated from field: double eval_score = 9;
+     * @generated from field: common.v1.RiskLevel risk_level = 36;
      */
-    evalScore: number;
+    riskLevel: RiskLevel;
     /**
-     * @generated from field: common.v1.RiskLevel risk_level = 10;
+     * @generated from field: string detail = 37;
      */
-    riskLevel: RiskLevel;
+    detail: string;
     /**
-     * @generated from field: repeated console.v1.TraceSpan spans = 11;
+     * @generated from field: string next_action = 38;
      */
-    spans: TraceSpan[];
+    nextAction: string;
     /**
-     * @generated from field: google.protobuf.Timestamp occurred_at = 12;
+     * @generated from field: google.protobuf.Timestamp occurred_at = 39;
      */
     occurredAt?: Timestamp | undefined;
     /**
-     * @generated from field: repeated traces.v1.TraceAnnotation annotations = 13;
+     * @generated from field: repeated console.v1.AuthorityScopeLedger scope_ledger = 40;
      */
-    annotations: TraceAnnotation[];
+    scopeLedger: AuthorityScopeLedger[];
     /**
-     * @generated from field: repeated string suggested_labels = 14;
+     * @generated from field: repeated console.v1.AuthorityMissingEvidence missing_evidence = 41;
      */
-    suggestedLabels: string[];
+    missingEvidence: AuthorityMissingEvidence[];
     /**
-     * evidence_source names the backing read path used for this drilldown
-     * ("traces-store", "console-snapshot", etc.) so the UI can distinguish a
-     * live trace lookup from a stale projection.
-     *
-     * @generated from field: string evidence_source = 15;
+     * @generated from field: repeated console.v1.AuthorityDeniedAction denied_actions = 42;
      */
-    evidenceSource: string;
+    deniedActions: AuthorityDeniedAction[];
     /**
-     * completeness_signals explain which evidence families are present, pending,
-     * or broken for the trace. They are product-facing diagnostics, not raw test
-     * failures.
-     *
-     * @generated from field: repeated console.v1.TraceCompletenessSignal completeness_signals = 16;
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 43;
      */
-    completenessSignals: TraceCompletenessSignal[];
+    evidenceRefs: RelatedResource[];
     /**
-     * security_decision_packet is the server-owned answer to the operator
-     * question "Can I approve this?" It joins governance, approval readiness,
-     * risk, and missing evidence so clients do not infer approval state from
-     * labels or text matching.
-     *
-     * @generated from field: console.v1.SecurityDecisionPacket security_decision_packet = 17;
+     * @generated from field: repeated console.v1.SecurityDecisionEvidenceGap evidence_gaps = 44;
      */
-    securityDecisionPacket?: SecurityDecisionPacket | undefined;
+    evidenceGaps: SecurityDecisionEvidenceGap[];
 };
 /**
- * Describes the message console.v1.TraceDrilldown.
- * Use `create(TraceDrilldownSchema)` to create a new message.
+ * Describes the message console.v1.AuthorityLedger.
+ * Use `create(AuthorityLedgerSchema)` to create a new message.
  */
-export declare const TraceDrilldownSchema: GenMessage<TraceDrilldown>;
+export declare const AuthorityLedgerSchema: GenMessage<AuthorityLedger>;
 /**
- * @generated from message console.v1.TraceSpan
+ * @generated from message console.v1.AuthorityScopeLedger
  */
-export type TraceSpan = Message<"console.v1.TraceSpan"> & {
+export type AuthorityScopeLedger = Message<"console.v1.AuthorityScopeLedger"> & {
     /**
-     * @generated from field: string span_id = 1;
+     * @generated from field: string group = 1;
      */
-    spanId: string;
+    group: string;
     /**
-     * @generated from field: string parent_span_id = 2;
+     * @generated from field: repeated string granted = 2;
      */
-    parentSpanId: string;
+    granted: string[];
     /**
-     * @generated from field: string name = 3;
+     * @generated from field: repeated string exercised = 3;
      */
-    name: string;
+    exercised: string[];
     /**
-     * @generated from field: string kind = 4;
+     * @generated from field: repeated string denied = 4;
      */
-    kind: string;
+    denied: string[];
     /**
-     * @generated from field: string model = 5;
+     * @generated from field: repeated string missing = 5;
      */
-    model: string;
+    missing: string[];
     /**
-     * @generated from field: string provider = 6;
+     * @generated from field: string state = 6;
      */
-    provider: string;
+    state: string;
     /**
-     * @generated from field: string status = 7;
+     * @generated from field: string policy_reason = 7;
      */
-    status: string;
+    policyReason: string;
     /**
-     * @generated from field: int64 latency_ms = 8;
+     * @generated from field: repeated string required_evidence = 8;
      */
-    latencyMs: bigint;
+    requiredEvidence: string[];
+};
+/**
+ * Describes the message console.v1.AuthorityScopeLedger.
+ * Use `create(AuthorityScopeLedgerSchema)` to create a new message.
+ */
+export declare const AuthorityScopeLedgerSchema: GenMessage<AuthorityScopeLedger>;
+/**
+ * @generated from message console.v1.AuthorityMissingEvidence
+ */
+export type AuthorityMissingEvidence = Message<"console.v1.AuthorityMissingEvidence"> & {
     /**
-     * @generated from field: double cost_usd = 9;
+     * @generated from field: string id = 1;
      */
-    costUsd: number;
+    id: string;
     /**
-     * @generated from field: int64 input_tokens = 10;
+     * @generated from field: string label = 2;
      */
-    inputTokens: bigint;
+    label: string;
     /**
-     * @generated from field: int64 output_tokens = 11;
+     * @generated from field: string state = 3;
      */
-    outputTokens: bigint;
+    state: string;
     /**
-     * @generated from field: string governance_decision = 12;
+     * @generated from field: string owner = 4;
      */
-    governanceDecision: string;
+    owner: string;
+    /**
+     * @generated from field: string recovery_action = 5;
+     */
+    recoveryAction: string;
+    /**
+     * @generated from field: string reason = 6;
+     */
+    reason: string;
+    /**
+     * @generated from field: string source = 7;
+     */
+    source: string;
+    /**
+     * @generated from field: repeated string span_ids = 8;
+     */
+    spanIds: string[];
+};
+/**
+ * Describes the message console.v1.AuthorityMissingEvidence.
+ * Use `create(AuthorityMissingEvidenceSchema)` to create a new message.
+ */
+export declare const AuthorityMissingEvidenceSchema: GenMessage<AuthorityMissingEvidence>;
+/**
+ * @generated from message console.v1.AuthorityDeniedAction
+ */
+export type AuthorityDeniedAction = Message<"console.v1.AuthorityDeniedAction"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string action_id = 2;
+     */
+    actionId: string;
+    /**
+     * @generated from field: string tool_name = 3;
+     */
+    toolName: string;
+    /**
+     * @generated from field: string policy_reason = 4;
+     */
+    policyReason: string;
+    /**
+     * @generated from field: repeated string required_evidence = 5;
+     */
+    requiredEvidence: string[];
+    /**
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 6;
+     */
+    evidenceRefs: RelatedResource[];
+};
+/**
+ * Describes the message console.v1.AuthorityDeniedAction.
+ * Use `create(AuthorityDeniedActionSchema)` to create a new message.
+ */
+export declare const AuthorityDeniedActionSchema: GenMessage<AuthorityDeniedAction>;
+/**
+ * @generated from message console.v1.AgentWorkforceRecord
+ */
+export type AgentWorkforceRecord = Message<"console.v1.AgentWorkforceRecord"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string workspace_id = 2;
+     */
+    workspaceId: string;
+    /**
+     * @generated from field: string organization_id = 3;
+     */
+    organizationId: string;
+    /**
+     * @generated from field: string agent_id = 4;
+     */
+    agentId: string;
+    /**
+     * @generated from field: string agent_name = 5;
+     */
+    agentName: string;
+    /**
+     * @generated from field: string runtime = 6;
+     */
+    runtime: string;
+    /**
+     * @generated from field: string owner = 7;
+     */
+    owner: string;
+    /**
+     * status is one of approval_ready, needs_evidence, needs_review, blocked, or observed.
+     *
+     * @generated from field: string status = 8;
+     */
+    status: string;
+    /**
+     * @generated from field: string queue_state = 9;
+     */
+    queueState: string;
+    /**
+     * @generated from field: common.v1.RiskLevel risk_level = 10;
+     */
+    riskLevel: RiskLevel;
+    /**
+     * @generated from field: string current_work = 11;
+     */
+    currentWork: string;
+    /**
+     * @generated from field: console.v1.RunAsIdentitySummary run_as_identity = 12;
+     */
+    runAsIdentity?: RunAsIdentitySummary | undefined;
+    /**
+     * @generated from field: console.v1.SecurityDecisionPacket security_decision = 13;
+     */
+    securityDecision?: SecurityDecisionPacket | undefined;
+    /**
+     * @generated from field: repeated console.v1.AgentWorkforceActionEvidence action_evidence = 14;
+     */
+    actionEvidence: AgentWorkforceActionEvidence[];
+    /**
+     * @generated from field: console.v1.CredentialAuthoritySummary credential_authority = 15;
+     */
+    credentialAuthority?: CredentialAuthoritySummary | undefined;
+    /**
+     * @generated from field: console.v1.CostEvidenceSummary cost_evidence = 16;
+     */
+    costEvidence?: CostEvidenceSummary | undefined;
+    /**
+     * @generated from field: string next_action = 17;
+     */
+    nextAction: string;
+    /**
+     * @generated from field: repeated string missing_evidence = 18;
+     */
+    missingEvidence: string[];
+    /**
+     * @generated from field: google.protobuf.Timestamp occurred_at = 19;
+     */
+    occurredAt?: Timestamp | undefined;
+    /**
+     * @generated from field: console.v1.AgentWorkforceDebugIdentifiers debug_identifiers = 20;
+     */
+    debugIdentifiers?: AgentWorkforceDebugIdentifiers | undefined;
+    /**
+     * @generated from field: console.v1.AgentWorkforceQuestionSummary question_summary = 21;
+     */
+    questionSummary?: AgentWorkforceQuestionSummary | undefined;
+    /**
+     * @generated from field: console.v1.AgentWorkforceApprovalDisablement approval_disablement = 22;
+     */
+    approvalDisablement?: AgentWorkforceApprovalDisablement | undefined;
+    /**
+     * @generated from field: console.v1.EndpointGuardrailSummary endpoint_guardrail = 23;
+     */
+    endpointGuardrail?: EndpointGuardrailSummary | undefined;
+};
+/**
+ * Describes the message console.v1.AgentWorkforceRecord.
+ * Use `create(AgentWorkforceRecordSchema)` to create a new message.
+ */
+export declare const AgentWorkforceRecordSchema: GenMessage<AgentWorkforceRecord>;
+/**
+ * @generated from message console.v1.EndpointGuardrailSummary
+ */
+export type EndpointGuardrailSummary = Message<"console.v1.EndpointGuardrailSummary"> & {
+    /**
+     * status is one of allowed, missing, blocked, or unknown.
+     *
+     * @generated from field: string status = 1;
+     */
+    status: string;
+    /**
+     * @generated from field: string endpoint_id = 2;
+     */
+    endpointId: string;
+    /**
+     * @generated from field: string route = 3;
+     */
+    route: string;
+    /**
+     * @generated from field: string exposure = 4;
+     */
+    exposure: string;
+    /**
+     * @generated from field: string allowlist_source = 5;
+     */
+    allowlistSource: string;
+    /**
+     * @generated from field: string resolution_policy = 6;
+     */
+    resolutionPolicy: string;
+    /**
+     * @generated from field: string blocked_reason = 7;
+     */
+    blockedReason: string;
+    /**
+     * @generated from field: repeated string missing_controls = 8;
+     */
+    missingControls: string[];
+    /**
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 9;
+     */
+    evidenceRefs: RelatedResource[];
+    /**
+     * @generated from field: string allowlist_status = 10;
+     */
+    allowlistStatus: string;
+    /**
+     * @generated from field: string resolution_status = 11;
+     */
+    resolutionStatus: string;
+};
+/**
+ * Describes the message console.v1.EndpointGuardrailSummary.
+ * Use `create(EndpointGuardrailSummarySchema)` to create a new message.
+ */
+export declare const EndpointGuardrailSummarySchema: GenMessage<EndpointGuardrailSummary>;
+/**
+ * @generated from message console.v1.AgentWorkforceQuestionSummary
+ */
+export type AgentWorkforceQuestionSummary = Message<"console.v1.AgentWorkforceQuestionSummary"> & {
+    /**
+     * @generated from field: string can_approve_this = 1;
+     */
+    canApproveThis: string;
+    /**
+     * @generated from field: string evidence_missing = 2;
+     */
+    evidenceMissing: string;
+    /**
+     * @generated from field: string agent_saw = 3;
+     */
+    agentSaw: string;
+    /**
+     * @generated from field: string agent_tried_to_do = 4;
+     */
+    agentTriedToDo: string;
+    /**
+     * @generated from field: string was_denied = 5;
+     */
+    wasDenied: string;
+    /**
+     * @generated from field: string should_do_next = 6;
+     */
+    shouldDoNext: string;
+};
+/**
+ * Describes the message console.v1.AgentWorkforceQuestionSummary.
+ * Use `create(AgentWorkforceQuestionSummarySchema)` to create a new message.
+ */
+export declare const AgentWorkforceQuestionSummarySchema: GenMessage<AgentWorkforceQuestionSummary>;
+/**
+ * @generated from message console.v1.AgentWorkforceApprovalDisablement
+ */
+export type AgentWorkforceApprovalDisablement = Message<"console.v1.AgentWorkforceApprovalDisablement"> & {
+    /**
+     * code is one of none, missing_credential_authority,
+     * unverified_run_as_identity, missing_cost_evidence,
+     * missing_action_evidence, security_decision_blocked, or
+     * security_review_required.
+     *
+     * @generated from field: string code = 1;
+     */
+    code: string;
+    /**
+     * @generated from field: string label = 2;
+     */
+    label: string;
+    /**
+     * @generated from field: string detail = 3;
+     */
+    detail: string;
+    /**
+     * @generated from field: string recovery_action = 4;
+     */
+    recoveryAction: string;
+    /**
+     * @generated from field: repeated string evidence_gap_ids = 5;
+     */
+    evidenceGapIds: string[];
+    /**
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 6;
+     */
+    evidenceRefs: RelatedResource[];
+};
+/**
+ * Describes the message console.v1.AgentWorkforceApprovalDisablement.
+ * Use `create(AgentWorkforceApprovalDisablementSchema)` to create a new message.
+ */
+export declare const AgentWorkforceApprovalDisablementSchema: GenMessage<AgentWorkforceApprovalDisablement>;
+/**
+ * @generated from message console.v1.RunAsIdentitySummary
+ */
+export type RunAsIdentitySummary = Message<"console.v1.RunAsIdentitySummary"> & {
+    /**
+     * status is one of verified, unverified, missing, or unknown.
+     *
+     * @generated from field: string status = 1;
+     */
+    status: string;
+    /**
+     * @generated from field: string identity = 2;
+     */
+    identity: string;
+    /**
+     * @generated from field: string source = 3;
+     */
+    source: string;
+    /**
+     * @generated from field: string missing_reason = 4;
+     */
+    missingReason: string;
+    /**
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 5;
+     */
+    evidenceRefs: RelatedResource[];
+};
+/**
+ * Describes the message console.v1.RunAsIdentitySummary.
+ * Use `create(RunAsIdentitySummarySchema)` to create a new message.
+ */
+export declare const RunAsIdentitySummarySchema: GenMessage<RunAsIdentitySummary>;
+/**
+ * @generated from message console.v1.AgentWorkforceActionEvidence
+ */
+export type AgentWorkforceActionEvidence = Message<"console.v1.AgentWorkforceActionEvidence"> & {
+    /**
+     * @generated from field: string action_id = 1;
+     */
+    actionId: string;
+    /**
+     * @generated from field: string tool_name = 2;
+     */
+    toolName: string;
+    /**
+     * @generated from field: string connector_id = 3;
+     */
+    connectorId: string;
+    /**
+     * @generated from field: string capability = 4;
+     */
+    capability: string;
+    /**
+     * @generated from field: string target_summary = 5;
+     */
+    targetSummary: string;
+    /**
+     * @generated from field: string decision = 6;
+     */
+    decision: string;
+    /**
+     * @generated from field: bool mutates_resource = 7;
+     */
+    mutatesResource: boolean;
+    /**
+     * @generated from field: common.v1.RiskLevel risk_level = 8;
+     */
+    riskLevel: RiskLevel;
+    /**
+     * @generated from field: string safe_arguments_ref = 9;
+     */
+    safeArgumentsRef: string;
+    /**
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 10;
+     */
+    evidenceRefs: RelatedResource[];
+    /**
+     * @generated from field: repeated string missing_evidence = 11;
+     */
+    missingEvidence: string[];
+    /**
+     * @generated from field: google.protobuf.Timestamp occurred_at = 12;
+     */
+    occurredAt?: Timestamp | undefined;
+    /**
+     * @generated from field: string principal_evidence_state = 13;
+     */
+    principalEvidenceState: string;
+    /**
+     * @generated from field: string credential_evidence_state = 14;
+     */
+    credentialEvidenceState: string;
+    /**
+     * @generated from field: string cost_evidence_state = 15;
+     */
+    costEvidenceState: string;
+};
+/**
+ * Describes the message console.v1.AgentWorkforceActionEvidence.
+ * Use `create(AgentWorkforceActionEvidenceSchema)` to create a new message.
+ */
+export declare const AgentWorkforceActionEvidenceSchema: GenMessage<AgentWorkforceActionEvidence>;
+/**
+ * @generated from message console.v1.CredentialAuthoritySummary
+ */
+export type CredentialAuthoritySummary = Message<"console.v1.CredentialAuthoritySummary"> & {
+    /**
+     * status is one of verified, unverified, missing, revoked, expired, or blocked.
+     *
+     * @generated from field: string status = 1;
+     */
+    status: string;
+    /**
+     * @generated from field: string subject = 2;
+     */
+    subject: string;
+    /**
+     * @generated from field: string provider = 3;
+     */
+    provider: string;
+    /**
+     * @generated from field: string authority_ref = 4;
+     */
+    authorityRef: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp expires_at = 5;
+     */
+    expiresAt?: Timestamp | undefined;
+    /**
+     * @generated from field: string revocation_state = 6;
+     */
+    revocationState: string;
+    /**
+     * @generated from field: repeated string missing_authorities = 7;
+     */
+    missingAuthorities: string[];
+    /**
+     * @generated from field: repeated console.v1.RelatedResource evidence_refs = 8;
+     */
+    evidenceRefs: RelatedResource[];
+};
+/**
+ * Describes the message console.v1.CredentialAuthoritySummary.
+ * Use `create(CredentialAuthoritySummarySchema)` to create a new message.
+ */
+export declare const CredentialAuthoritySummarySchema: GenMessage<CredentialAuthoritySummary>;
+/**
+ * @generated from message console.v1.CostEvidenceSummary
+ */
+export type CostEvidenceSummary = Message<"console.v1.CostEvidenceSummary"> & {
+    /**
+     * status is one of recorded or missing.
+     *
+     * @generated from field: string status = 1;
+     */
+    status: string;
+    /**
+     * @generated from field: string provider = 2;
+     */
+    provider: string;
+    /**
+     * @generated from field: string model = 3;
+     */
+    model: string;
+    /**
+     * @generated from field: int64 input_tokens = 4;
+     */
+    inputTokens: bigint;
+    /**
+     * @generated from field: int64 output_tokens = 5;
+     */
+    outputTokens: bigint;
+    /**
+     * @generated from field: double total_cost_usd = 6;
+     */
+    totalCostUsd: number;
+    /**
+     * @generated from field: string meter_ref = 7;
+     */
+    meterRef: string;
+    /**
+     * @generated from field: string missing_reason = 8;
+     */
+    missingReason: string;
+};
+/**
+ * Describes the message console.v1.CostEvidenceSummary.
+ * Use `create(CostEvidenceSummarySchema)` to create a new message.
+ */
+export declare const CostEvidenceSummarySchema: GenMessage<CostEvidenceSummary>;
+/**
+ * @generated from message console.v1.AgentWorkforceDebugIdentifiers
+ */
+export type AgentWorkforceDebugIdentifiers = Message<"console.v1.AgentWorkforceDebugIdentifiers"> & {
+    /**
+     * @generated from field: repeated string span_ids = 1;
+     */
+    spanIds: string[];
+    /**
+     * @generated from field: repeated string raw_reference_ids = 2;
+     */
+    rawReferenceIds: string[];
+    /**
+     * @generated from field: repeated string source_event_ids = 3;
+     */
+    sourceEventIds: string[];
+    /**
+     * @generated from field: google.protobuf.Struct attributes = 4;
+     */
+    attributes?: JsonObject | undefined;
+    /**
+     * @generated from field: string run_id = 5;
+     */
+    runId: string;
+    /**
+     * @generated from field: string session_id = 6;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: string trace_id = 7;
+     */
+    traceId: string;
+};
+/**
+ * Describes the message console.v1.AgentWorkforceDebugIdentifiers.
+ * Use `create(AgentWorkforceDebugIdentifiersSchema)` to create a new message.
+ */
+export declare const AgentWorkforceDebugIdentifiersSchema: GenMessage<AgentWorkforceDebugIdentifiers>;
+/**
+ * @generated from message console.v1.RiskFinding
+ */
+export type RiskFinding = Message<"console.v1.RiskFinding"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string title = 2;
+     */
+    title: string;
+    /**
+     * @generated from field: string detail = 3;
+     */
+    detail: string;
+    /**
+     * @generated from field: string source = 4;
+     */
+    source: string;
+    /**
+     * @generated from field: string asset_id = 5;
+     */
+    assetId: string;
+    /**
+     * @generated from field: string status = 6;
+     */
+    status: string;
+    /**
+     * @generated from field: common.v1.RiskLevel risk_level = 7;
+     */
+    riskLevel: RiskLevel;
+    /**
+     * @generated from field: string policy = 8;
+     */
+    policy: string;
+    /**
+     * @generated from field: string next_action = 9;
+     */
+    nextAction: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp detected_at = 10;
+     */
+    detectedAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message console.v1.RiskFinding.
+ * Use `create(RiskFindingSchema)` to create a new message.
+ */
+export declare const RiskFindingSchema: GenMessage<RiskFinding>;
+/**
+ * @generated from message console.v1.IntegrationTile
+ */
+export type IntegrationTile = Message<"console.v1.IntegrationTile"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * @generated from field: string provider = 3;
+     */
+    provider: string;
+    /**
+     * @generated from field: string category = 4;
+     */
+    category: string;
+    /**
+     * @generated from field: string status = 5;
+     */
+    status: string;
+    /**
+     * @generated from field: string detail = 6;
+     */
+    detail: string;
+    /**
+     * @generated from field: string setup_command = 7;
+     */
+    setupCommand: string;
+    /**
+     * @generated from field: repeated string scopes = 8;
+     */
+    scopes: string[];
+    /**
+     * @generated from field: repeated string capabilities = 9;
+     */
+    capabilities: string[];
+    /**
+     * @generated from field: google.protobuf.Timestamp last_seen_at = 10;
+     */
+    lastSeenAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message console.v1.IntegrationTile.
+ * Use `create(IntegrationTileSchema)` to create a new message.
+ */
+export declare const IntegrationTileSchema: GenMessage<IntegrationTile>;
+/**
+ * @generated from message console.v1.OnboardingTask
+ */
+export type OnboardingTask = Message<"console.v1.OnboardingTask"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string title = 2;
+     */
+    title: string;
+    /**
+     * @generated from field: string detail = 3;
+     */
+    detail: string;
+    /**
+     * @generated from field: string status = 4;
+     */
+    status: string;
+    /**
+     * @generated from field: string cta_label = 5;
+     */
+    ctaLabel: string;
+    /**
+     * @generated from field: string command = 6;
+     */
+    command: string;
+    /**
+     * @generated from field: repeated string required_integrations = 7;
+     */
+    requiredIntegrations: string[];
+};
+/**
+ * Describes the message console.v1.OnboardingTask.
+ * Use `create(OnboardingTaskSchema)` to create a new message.
+ */
+export declare const OnboardingTaskSchema: GenMessage<OnboardingTask>;
+/**
+ * @generated from message console.v1.TraceDrilldown
+ */
+export type TraceDrilldown = Message<"console.v1.TraceDrilldown"> & {
+    /**
+     * @generated from field: string trace_id = 1;
+     */
+    traceId: string;
+    /**
+     * @generated from field: string root_name = 2;
+     */
+    rootName: string;
+    /**
+     * @generated from field: string asset_id = 3;
+     */
+    assetId: string;
+    /**
+     * @generated from field: string status = 4;
+     */
+    status: string;
+    /**
+     * @generated from field: int64 total_latency_ms = 5;
+     */
+    totalLatencyMs: bigint;
+    /**
+     * @generated from field: int64 input_tokens = 6;
+     */
+    inputTokens: bigint;
+    /**
+     * @generated from field: int64 output_tokens = 7;
+     */
+    outputTokens: bigint;
+    /**
+     * @generated from field: double cost_usd = 8;
+     */
+    costUsd: number;
+    /**
+     * @generated from field: double eval_score = 9;
+     */
+    evalScore: number;
+    /**
+     * @generated from field: common.v1.RiskLevel risk_level = 10;
+     */
+    riskLevel: RiskLevel;
+    /**
+     * @generated from field: repeated console.v1.TraceSpan spans = 11;
+     */
+    spans: TraceSpan[];
+    /**
+     * @generated from field: google.protobuf.Timestamp occurred_at = 12;
+     */
+    occurredAt?: Timestamp | undefined;
+    /**
+     * @generated from field: repeated traces.v1.TraceAnnotation annotations = 13;
+     */
+    annotations: TraceAnnotation[];
+    /**
+     * @generated from field: repeated string suggested_labels = 14;
+     */
+    suggestedLabels: string[];
+    /**
+     * evidence_source names the backing read path used for this drilldown
+     * ("traces-store", "console-snapshot", etc.) so the UI can distinguish a
+     * live trace lookup from a stale projection.
+     *
+     * @generated from field: string evidence_source = 15;
+     */
+    evidenceSource: string;
+    /**
+     * completeness_signals explain which evidence families are present, pending,
+     * or broken for the trace. They are product-facing diagnostics, not raw test
+     * failures.
+     *
+     * @generated from field: repeated console.v1.TraceCompletenessSignal completeness_signals = 16;
+     */
+    completenessSignals: TraceCompletenessSignal[];
+    /**
+     * security_decision_packet is the server-owned answer to the operator
+     * question "Can I approve this?" It joins governance, approval readiness,
+     * risk, and missing evidence so clients do not infer approval state from
+     * labels or text matching.
+     *
+     * @generated from field: console.v1.SecurityDecisionPacket security_decision_packet = 17;
+     */
+    securityDecisionPacket?: SecurityDecisionPacket | undefined;
+};
+/**
+ * Describes the message console.v1.TraceDrilldown.
+ * Use `create(TraceDrilldownSchema)` to create a new message.
+ */
+export declare const TraceDrilldownSchema: GenMessage<TraceDrilldown>;
+/**
+ * @generated from message console.v1.TraceSpan
+ */
+export type TraceSpan = Message<"console.v1.TraceSpan"> & {
+    /**
+     * @generated from field: string span_id = 1;
+     */
+    spanId: string;
+    /**
+     * @generated from field: string parent_span_id = 2;
+     */
+    parentSpanId: string;
+    /**
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * @generated from field: string kind = 4;
+     */
+    kind: string;
+    /**
+     * @generated from field: string model = 5;
+     */
+    model: string;
+    /**
+     * @generated from field: string provider = 6;
+     */
+    provider: string;
+    /**
+     * @generated from field: string status = 7;
+     */
+    status: string;
+    /**
+     * @generated from field: int64 latency_ms = 8;
+     */
+    latencyMs: bigint;
+    /**
+     * @generated from field: double cost_usd = 9;
+     */
+    costUsd: number;
+    /**
+     * @generated from field: int64 input_tokens = 10;
+     */
+    inputTokens: bigint;
+    /**
+     * @generated from field: int64 output_tokens = 11;
+     */
+    outputTokens: bigint;
+    /**
+     * @generated from field: string governance_decision = 12;
+     */
+    governanceDecision: string;
     /**
      * @generated from field: google.protobuf.Timestamp started_at = 13;
      */
@@ -1607,6 +2479,30 @@ export declare const ConsoleService: GenService<{
         input: typeof ListCostUsageRequestSchema;
         output: typeof ListCostUsageResponseSchema;
     };
+    /**
+     * ListAuthorityPosture returns server-owned credential and authority posture
+     * for agent, tool, and connector work. It lets clients ask which actor is
+     * assuming which authority without deriving posture from UI copy.
+     *
+     * @generated from rpc console.v1.ConsoleService.ListAuthorityPosture
+     */
+    listAuthorityPosture: {
+        methodKind: "unary";
+        input: typeof ListAuthorityPostureRequestSchema;
+        output: typeof ListAuthorityPostureResponseSchema;
+    };
+    /**
+     * ListAgentWorkforceRecords returns the server-owned Agent Workforce read
+     * model for security engineers. It keeps approval, action, credential, cost,
+     * and debug evidence typed so clients do not infer it from native event text.
+     *
+     * @generated from rpc console.v1.ConsoleService.ListAgentWorkforceRecords
+     */
+    listAgentWorkforceRecords: {
+        methodKind: "unary";
+        input: typeof ListAgentWorkforceRecordsRequestSchema;
+        output: typeof ListAgentWorkforceRecordsResponseSchema;
+    };
     /**
      * ListFindings returns open risk and posture findings.
      *