@leaflow/sdk 0.0.0-dev.53.gd8db059 → 0.0.0-dev.538.g0285c19

package/dist/proto/leaflow/fleet/control/v1/control_pb.d.ts

@@ -0,0 +1,1261 @@
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Any, Duration, Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Call, CallCancel, CallResult } from "../../rpc/v1/rpc_pb.js";
+import type { Migration, Signal } from "../../transport/v1/transport_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file leaflow/fleet/control/v1/control.proto.
+ */
+export declare const file_leaflow_fleet_control_v1_control: GenFile;
+/**
+ * A message from an endpoint.
+ *
+ * @generated from message leaflow.fleet.control.v1.ClientMessage
+ */
+export type ClientMessage = Message<"leaflow.fleet.control.v1.ClientMessage"> & {
+    /**
+     * The message.
+     *
+     * @generated from oneof leaflow.fleet.control.v1.ClientMessage.message
+     */
+    message: {
+        /**
+         * The endpoint's credential. The first message.
+         *
+         * @generated from field: leaflow.fleet.control.v1.ClientHello client_hello = 1;
+         */
+        value: ClientHello;
+        case: "clientHello";
+    } | {
+        /**
+         * Asks the service to answer with a Pong.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Ping ping = 2;
+         */
+        value: Ping;
+        case: "ping";
+    } | {
+        /**
+         * Answers a Ping of the service.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Pong pong = 3;
+         */
+        value: Pong;
+        case: "pong";
+    } | {
+        /**
+         * Starts a call of a method the service serves.
+         *
+         * @generated from field: leaflow.fleet.rpc.v1.Call call = 4;
+         */
+        value: Call;
+        case: "call";
+    } | {
+        /**
+         * Answers a call of the service.
+         *
+         * @generated from field: leaflow.fleet.rpc.v1.CallResult call_result = 5;
+         */
+        value: CallResult;
+        case: "callResult";
+    } | {
+        /**
+         * Cancels a call of the endpoint.
+         *
+         * @generated from field: leaflow.fleet.rpc.v1.CallCancel call_cancel = 6;
+         */
+        value: CallCancel;
+        case: "callCancel";
+    } | {
+        /**
+         * Signaling for a PeerConnection. Session processes only.
+         *
+         * @generated from field: leaflow.fleet.transport.v1.Signal signal = 7;
+         */
+        value: Signal;
+        case: "signal";
+    } | {
+        /**
+         * A step of a migration. Session processes only.
+         *
+         * @generated from field: leaflow.fleet.transport.v1.Migration migration = 8;
+         */
+        value: Migration;
+        case: "migration";
+    } | {
+        /**
+         * The endpoint closes the connection.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Close close = 9;
+         */
+        value: Close;
+        case: "close";
+    } | {
+        /**
+         * A piece of a message too large to send whole.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Fragment fragment = 10;
+         */
+        value: Fragment;
+        case: "fragment";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.ClientMessage.
+ * Use `create(ClientMessageSchema)` to create a new message.
+ */
+export declare const ClientMessageSchema: GenMessage<ClientMessage>;
+/**
+ * A message from the service.
+ *
+ * @generated from message leaflow.fleet.control.v1.ServerMessage
+ */
+export type ServerMessage = Message<"leaflow.fleet.control.v1.ServerMessage"> & {
+    /**
+     * The message.
+     *
+     * @generated from oneof leaflow.fleet.control.v1.ServerMessage.message
+     */
+    message: {
+        /**
+         * The challenge and limits. The first message.
+         *
+         * @generated from field: leaflow.fleet.control.v1.ServerHello server_hello = 1;
+         */
+        value: ServerHello;
+        case: "serverHello";
+    } | {
+        /**
+         * The service accepted ClientHello.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Welcome welcome = 2;
+         */
+        value: Welcome;
+        case: "welcome";
+    } | {
+        /**
+         * Asks the endpoint to answer with a Pong.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Ping ping = 3;
+         */
+        value: Ping;
+        case: "ping";
+    } | {
+        /**
+         * Answers a Ping of the endpoint.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Pong pong = 4;
+         */
+        value: Pong;
+        case: "pong";
+    } | {
+        /**
+         * Starts a call of a method the endpoint serves.
+         *
+         * @generated from field: leaflow.fleet.rpc.v1.Call call = 5;
+         */
+        value: Call;
+        case: "call";
+    } | {
+        /**
+         * Answers a call of the endpoint.
+         *
+         * @generated from field: leaflow.fleet.rpc.v1.CallResult call_result = 6;
+         */
+        value: CallResult;
+        case: "callResult";
+    } | {
+        /**
+         * Cancels a call of the service.
+         *
+         * @generated from field: leaflow.fleet.rpc.v1.CallCancel call_cancel = 7;
+         */
+        value: CallCancel;
+        case: "callCancel";
+    } | {
+        /**
+         * Signaling for a PeerConnection, from its participant through the Fleet
+         * API. To session processes only.
+         *
+         * @generated from field: leaflow.fleet.transport.v1.Signal signal = 8;
+         */
+        value: Signal;
+        case: "signal";
+    } | {
+        /**
+         * A step of a migration, from its participant through the Fleet API. To
+         * session processes only.
+         *
+         * @generated from field: leaflow.fleet.transport.v1.Migration migration = 9;
+         */
+        value: Migration;
+        case: "migration";
+    } | {
+        /**
+         * The keys the service signs with, after they changed.
+         *
+         * @generated from field: leaflow.fleet.control.v1.SigningKeys signing_keys = 10;
+         */
+        value: SigningKeys;
+        case: "signingKeys";
+    } | {
+        /**
+         * The service closes the connection.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Close close = 11;
+         */
+        value: Close;
+        case: "close";
+    } | {
+        /**
+         * A piece of a message too large to send whole.
+         *
+         * @generated from field: leaflow.fleet.control.v1.Fragment fragment = 12;
+         */
+        value: Fragment;
+        case: "fragment";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.ServerMessage.
+ * Use `create(ServerMessageSchema)` to create a new message.
+ */
+export declare const ServerMessageSchema: GenMessage<ServerMessage>;
+/**
+ * The service's side of the handshake. Every field is set; an endpoint closes
+ * with PROTOCOL_ERROR a ServerHello that lacks one.
+ *
+ * @generated from message leaflow.fleet.control.v1.ServerHello
+ */
+export type ServerHello = Message<"leaflow.fleet.control.v1.ServerHello"> & {
+    /**
+     * The HTTPS origin (RFC 6454) that names the service, such as
+     * "https://fleet.leaflow.cloud": the issuer of everything it signs.
+     *
+     * @generated from field: string issuer = 1;
+     */
+    issuer: string;
+    /**
+     * 32 random bytes, new for this connection, that the credential signs.
+     *
+     * @generated from field: bytes challenge = 2;
+     */
+    challenge: Uint8Array;
+    /**
+     * How long the endpoint may send nothing before it sends a Ping.
+     *
+     * @generated from field: google.protobuf.Duration ping_interval = 3;
+     */
+    pingInterval?: Duration | undefined;
+    /**
+     * How long either side waits without receiving anything before it closes
+     * the connection.
+     *
+     * @generated from field: google.protobuf.Duration idle_timeout = 4;
+     */
+    idleTimeout?: Duration | undefined;
+    /**
+     * The largest WebSocket message, in bytes, either end may send. At least
+     * 512 KiB, so that a Fragment always fits.
+     *
+     * @generated from field: uint32 max_message_size = 5;
+     */
+    maxMessageSize: number;
+    /**
+     * How many calls of the endpoint may run on the service at a time. At
+     * least 1.
+     *
+     * @generated from field: uint32 max_concurrent_calls = 6;
+     */
+    maxConcurrentCalls: number;
+    /**
+     * How fast the endpoint's message bucket refills, in messages a second
+     * (see Flow). At least 1.
+     *
+     * @generated from field: uint32 messages_per_second = 7;
+     */
+    messagesPerSecond: number;
+    /**
+     * How many tokens the endpoint's message bucket holds (see Flow). At
+     * least 1.
+     *
+     * @generated from field: uint32 message_burst = 8;
+     */
+    messageBurst: number;
+    /**
+     * How fast the endpoint's byte bucket refills, in bytes a second (see
+     * Flow). At least 1.
+     *
+     * @generated from field: uint32 bytes_per_second = 9;
+     */
+    bytesPerSecond: number;
+    /**
+     * How many bytes the endpoint's byte bucket holds (see Flow). At least
+     * max_message_size, so that any message fits.
+     *
+     * @generated from field: uint32 byte_burst = 10;
+     */
+    byteBurst: number;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.ServerHello.
+ * Use `create(ServerHelloSchema)` to create a new message.
+ */
+export declare const ServerHelloSchema: GenMessage<ServerHello>;
+/**
+ * The endpoint's side of the handshake.
+ *
+ * @generated from message leaflow.fleet.control.v1.ClientHello
+ */
+export type ClientHello = Message<"leaflow.fleet.control.v1.ClientHello"> & {
+    /**
+     * Who the endpoint is. Its case decides what the connection may do.
+     *
+     * @generated from oneof leaflow.fleet.control.v1.ClientHello.credential
+     */
+    credential: {
+        /**
+         * The daemon of an enrolled machine.
+         *
+         * @generated from field: leaflow.fleet.control.v1.MachineCredential machine = 1;
+         */
+        value: MachineCredential;
+        case: "machine";
+    } | {
+        /**
+         * The daemon of a machine that is enrolling.
+         *
+         * @generated from field: leaflow.fleet.control.v1.EnrollmentCredential enrollment = 2;
+         */
+        value: EnrollmentCredential;
+        case: "enrollment";
+    } | {
+        /**
+         * A session process.
+         *
+         * @generated from field: leaflow.fleet.control.v1.SessionCredential session = 3;
+         */
+        value: SessionCredential;
+        case: "session";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * The endpoint software, such as "leaflow-fleet-agent/1.0.0". For
+     * diagnostics only. A machine reports its Agent's version with
+     * leaflow.fleet.machine.v1.
+     *
+     * @generated from field: string user_agent = 5;
+     */
+    userAgent: string;
+    /**
+     * 16 random bytes that the endpoint process chooses when it starts and keeps
+     * for all its connections. They tell a connection of the same process from
+     * one of a process that started anew, whose calls in flight were lost (see
+     * Disconnection).
+     *
+     * @generated from field: bytes instance_id = 6;
+     */
+    instanceId: Uint8Array;
+    /**
+     * The request_ids of the calls the service made that this process received
+     * on an earlier connection and has not answered on an open one (see
+     * Disconnection). The process names each until the call's timeout has
+     * passed; at most 1024.
+     *
+     * @generated from field: repeated string received_request_ids = 7;
+     */
+    receivedRequestIds: string[];
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.ClientHello.
+ * Use `create(ClientHelloSchema)` to create a new message.
+ */
+export declare const ClientHelloSchema: GenMessage<ClientHello>;
+/**
+ * The daemon of an enrolled machine, with its machine key.
+ *
+ * @generated from message leaflow.fleet.control.v1.MachineCredential
+ */
+export type MachineCredential = Message<"leaflow.fleet.control.v1.MachineCredential"> & {
+    /**
+     * The machine, as EnrollMachine returned it.
+     *
+     * @generated from field: string machine_id = 1;
+     */
+    machineId: string;
+    /**
+     * The Ed25519 signature by the machine key over the ASCII bytes
+     * "leaflow.fleet.control.v1.MachineCredential", one zero byte and
+     * ServerHello.challenge.
+     *
+     * @generated from field: bytes signature = 2;
+     */
+    signature: Uint8Array;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.MachineCredential.
+ * Use `create(MachineCredentialSchema)` to create a new message.
+ */
+export declare const MachineCredentialSchema: GenMessage<MachineCredential>;
+/**
+ * The daemon of a machine that is not enrolled yet, with the machine key it
+ * generated. Any key that signs is admitted, but only to call EnrollMachine.
+ *
+ * @generated from message leaflow.fleet.control.v1.EnrollmentCredential
+ */
+export type EnrollmentCredential = Message<"leaflow.fleet.control.v1.EnrollmentCredential"> & {
+    /**
+     * The Ed25519 public key, 32 bytes.
+     *
+     * @generated from field: bytes public_key = 1;
+     */
+    publicKey: Uint8Array;
+    /**
+     * The signature by public_key over the ASCII bytes
+     * "leaflow.fleet.control.v1.EnrollmentCredential", one zero byte
+     * and ServerHello.challenge.
+     *
+     * @generated from field: bytes signature = 2;
+     */
+    signature: Uint8Array;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.EnrollmentCredential.
+ * Use `create(EnrollmentCredentialSchema)` to create a new message.
+ */
+export declare const EnrollmentCredentialSchema: GenMessage<EnrollmentCredential>;
+/**
+ * A session process, with the key its machine delegated to it.
+ *
+ * @generated from message leaflow.fleet.control.v1.SessionCredential
+ */
+export type SessionCredential = Message<"leaflow.fleet.control.v1.SessionCredential"> & {
+    /**
+     * A serialized SessionDelegation.
+     *
+     * @generated from field: bytes delegation = 1;
+     */
+    delegation: Uint8Array;
+    /**
+     * The Ed25519 signature by the machine key over the ASCII bytes
+     * "leaflow.fleet.control.v1.SessionDelegation", one zero byte and
+     * delegation.
+     *
+     * @generated from field: bytes delegation_signature = 2;
+     */
+    delegationSignature: Uint8Array;
+    /**
+     * The signature by SessionDelegation.session_public_key over the ASCII
+     * bytes "leaflow.fleet.control.v1.SessionCredential", one zero
+     * byte and ServerHello.challenge.
+     *
+     * @generated from field: bytes signature = 3;
+     */
+    signature: Uint8Array;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.SessionCredential.
+ * Use `create(SessionCredentialSchema)` to create a new message.
+ */
+export declare const SessionCredentialSchema: GenMessage<SessionCredential>;
+/**
+ * The daemon's statement that a key acts for one of its sessions. The daemon
+ * signs it without asking the service; the service also checks that the
+ * session belongs to the machine and has not ended, and otherwise closes with
+ * SESSION_NOT_FOUND.
+ *
+ * @generated from message leaflow.fleet.control.v1.SessionDelegation
+ */
+export type SessionDelegation = Message<"leaflow.fleet.control.v1.SessionDelegation"> & {
+    /**
+     * The machine that signs.
+     *
+     * @generated from field: string machine_id = 1;
+     */
+    machineId: string;
+    /**
+     * The session the key acts for.
+     *
+     * @generated from field: string session_id = 2;
+     */
+    sessionId: string;
+    /**
+     * The session process's Ed25519 public key, 32 bytes. Its private half
+     * never leaves that process, and a process that starts again makes a new
+     * one.
+     *
+     * @generated from field: bytes session_public_key = 3;
+     */
+    sessionPublicKey: Uint8Array;
+    /**
+     * When the daemon signed it. Refused when more than 5 minutes ahead of the
+     * service's clock.
+     *
+     * @generated from field: google.protobuf.Timestamp issued_at = 4;
+     */
+    issuedAt?: Timestamp | undefined;
+    /**
+     * At most 15 minutes after issued_at. Refused once this time and 5 more
+     * minutes have passed. It bounds the handshake only, not the connection.
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 5;
+     */
+    expiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.SessionDelegation.
+ * Use `create(SessionDelegationSchema)` to create a new message.
+ */
+export declare const SessionDelegationSchema: GenMessage<SessionDelegation>;
+/**
+ * The service accepted ClientHello.
+ *
+ * @generated from message leaflow.fleet.control.v1.Welcome
+ */
+export type Welcome = Message<"leaflow.fleet.control.v1.Welcome"> & {
+    /**
+     * The connection.
+     *
+     * @generated from field: uint64 connection_id = 1;
+     */
+    connectionId: bigint;
+    /**
+     * The machine. Empty while enrolling.
+     *
+     * @generated from field: string machine_id = 2;
+     */
+    machineId: string;
+    /**
+     * The session. Session processes only.
+     *
+     * @generated from field: string session_id = 3;
+     */
+    sessionId: string;
+    /**
+     * The keys the service signs with.
+     *
+     * @generated from field: leaflow.fleet.control.v1.SigningKeys signing_keys = 4;
+     */
+    signingKeys?: SigningKeys | undefined;
+    /**
+     * How long, after this connection drops, the endpoint keeps the results of
+     * the calls it received on it (see Disconnection) and, for a session
+     * process, the service keeps the session's participants (see Resumption).
+     *
+     * @generated from field: google.protobuf.Duration resume_grace = 5;
+     */
+    resumeGrace?: Duration | undefined;
+    /**
+     * This connection follows one of the same process (ClientHello.instance_id);
+     * for a session process, also within resume_grace, so that the session kept
+     * its participants.
+     *
+     * @generated from field: bool resumed = 6;
+     */
+    resumed: boolean;
+    /**
+     * The STUN servers (RFC 7064 stun: URLs) from which a session process learns
+     * its server-reflexive addresses ahead of its PeerConnections. A session
+     * process shares one UDP socket per address family among its PeerConnections,
+     * asks these servers for the socket's mapping when it starts and again at
+     * most every 20 seconds, which also keeps the mapping alive, and gives each
+     * PeerConnection the known address as its srflx candidate at once instead of
+     * asking the servers again. Session processes only; empty when
+     * PeerConnections relay only.
+     *
+     * @generated from field: repeated string stun_urls = 7;
+     */
+    stunUrls: string[];
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.Welcome.
+ * Use `create(WelcomeSchema)` to create a new message.
+ */
+export declare const WelcomeSchema: GenMessage<Welcome>;
+/**
+ * The keys the service signs with, all of them. Replaces the previous set.
+ *
+ * @generated from message leaflow.fleet.control.v1.SigningKeys
+ */
+export type SigningKeys = Message<"leaflow.fleet.control.v1.SigningKeys"> & {
+    /**
+     * At most 8.
+     *
+     * @generated from field: repeated leaflow.fleet.control.v1.PublicKey keys = 1;
+     */
+    keys: PublicKey[];
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.SigningKeys.
+ * Use `create(SigningKeysSchema)` to create a new message.
+ */
+export declare const SigningKeysSchema: GenMessage<SigningKeys>;
+/**
+ * A public key of the service.
+ *
+ * @generated from message leaflow.fleet.control.v1.PublicKey
+ */
+export type PublicKey = Message<"leaflow.fleet.control.v1.PublicKey"> & {
+    /**
+     * The key_id that signed statements name.
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+    /**
+     * The key.
+     *
+     * @generated from oneof leaflow.fleet.control.v1.PublicKey.key
+     */
+    key: {
+        /**
+         * An Ed25519 public key (RFC 8032), 32 bytes.
+         *
+         * @generated from field: bytes ed25519 = 2;
+         */
+        value: Uint8Array;
+        case: "ed25519";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.PublicKey.
+ * Use `create(PublicKeySchema)` to create a new message.
+ */
+export declare const PublicKeySchema: GenMessage<PublicKey>;
+/**
+ * The service's statement of what one participant may do in one session. The
+ * session takes who the participant is and what it may do from here, never from
+ * the participant.
+ *
+ * @generated from message leaflow.fleet.control.v1.Authorization
+ */
+export type Authorization = Message<"leaflow.fleet.control.v1.Authorization"> & {
+    /**
+     * ServerHello.issuer of the service that signed it.
+     *
+     * @generated from field: string issuer = 1;
+     */
+    issuer: string;
+    /**
+     * The machine of the session.
+     *
+     * @generated from field: string machine_id = 2;
+     */
+    machineId: string;
+    /**
+     * The session.
+     *
+     * @generated from field: string session_id = 3;
+     */
+    sessionId: string;
+    /**
+     * The participant.
+     *
+     * @generated from field: uint64 participant_id = 4;
+     */
+    participantId: bigint;
+    /**
+     * The platform user the participant acts for.
+     *
+     * @generated from field: string user_id = 5;
+     */
+    userId: string;
+    /**
+     * The user's name, plain text.
+     *
+     * @generated from field: string display_name = 6;
+     */
+    displayName: string;
+    /**
+     * The name the client gave itself when it created the participant, such
+     * as "console" or "assistant", at most 64 bytes. Neither unique nor
+     * verified: it lets people tell participants apart and grants nothing.
+     *
+     * @generated from field: string client_name = 7;
+     */
+    clientName: string;
+    /**
+     * The participant's Ed25519 public key, 32 bytes. The session accepts only
+     * a PeerConnection whose participant Hello is signed with it
+     * (leaflow.fleet.transport.v1).
+     *
+     * @generated from field: bytes participant_public_key = 9;
+     */
+    participantPublicKey: Uint8Array;
+    /**
+     * The participant may only watch, whatever policies say.
+     *
+     * @generated from field: bool read_only = 11;
+     */
+    readOnly: boolean;
+    /**
+     * The policies of the domains the participant may use, at most one of each
+     * type, such as a leaflow.fleet.filetransfer.v1.FileTransferPolicy.
+     * A domain whose policy is missing is denied. A type the session does not
+     * know is ignored.
+     *
+     * @generated from field: repeated google.protobuf.Any policies = 12;
+     */
+    policies: Any[];
+    /**
+     * When the service issued it. Refused when more than 5 minutes ahead of the
+     * session's clock.
+     *
+     * @generated from field: google.protobuf.Timestamp issued_at = 13;
+     */
+    issuedAt?: Timestamp | undefined;
+    /**
+     * 普通 WebRTC 授权保留 5 分钟时钟宽限；control_only 授权最多在 issued_at
+     * 的 15 分钟后到期，且在此时刻立即失效，没有到期宽限。会话拒绝新调用、
+     * 取消进行中的调用并释放其输入/租约，不能因未建连接而不清理。
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 14;
+     */
+    expiresAt?: Timestamp | undefined;
+    /**
+     * 仅允许 Fleet 经此会话 control 转发工具调用，不允许建立 PeerConnection。
+     * true 时 participant_public_key 必须为空，身份由平台已认证的调用者及签名授权
+     * 确立；不能伪造一个 WebRTC Connection 或声称已完成持钥握手。false 保持原有
+     * WebRTC 参与者规则，要求 32 字节公钥及 transport Hello 持钥证明。
+     *
+     * @generated from field: bool control_only = 15;
+     */
+    controlOnly: boolean;
+    /**
+     * control_only 时必填的客户端实例 UUID，区别同一用户的并发调用方；由客户端
+     * 创建并由服务绑定进授权，不是身份凭据，也不按 client_name 的展示标签授权。
+     * 该运行身份无需工具目录/结果数据库或缓存；公开 API 仍逐次认证并校验权限。
+     * 旧授权到期或调用者结束后，同一实例的新有效签名授权可以重新准入，但其
+     * issued_at 必须严格高于此身份已接受的高水位，身份/权限仍须一致，且旧执行
+     * 已完全退出。过期或旧签名不得重放；旧调用的取消、计时器和清理不能作用于
+     * 新执行代际。安全状态须有界并按最长授权有效期回收，不能永久耗尽实例额度。
+     *
+     * @generated from field: string client_instance_id = 16;
+     */
+    clientInstanceId: string;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.Authorization.
+ * Use `create(AuthorizationSchema)` to create a new message.
+ */
+export declare const AuthorizationSchema: GenMessage<Authorization>;
+/**
+ * An Authorization signed by the service.
+ *
+ * @generated from message leaflow.fleet.control.v1.SignedAuthorization
+ */
+export type SignedAuthorization = Message<"leaflow.fleet.control.v1.SignedAuthorization"> & {
+    /**
+     * PublicKey.key_id of the key that signed it.
+     *
+     * @generated from field: string key_id = 1;
+     */
+    keyId: string;
+    /**
+     * A serialized Authorization. Receivers decode it from these bytes only
+     * after the signature verified, and keep the bytes: others refer to their
+     * SHA-256.
+     *
+     * @generated from field: bytes authorization = 2;
+     */
+    authorization: Uint8Array;
+    /**
+     * The Ed25519 signature over the ASCII bytes
+     * "leaflow.fleet.control.v1.Authorization", one zero byte and
+     * authorization.
+     *
+     * @generated from field: bytes signature = 3;
+     */
+    signature: Uint8Array;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.SignedAuthorization.
+ * Use `create(SignedAuthorizationSchema)` to create a new message.
+ */
+export declare const SignedAuthorizationSchema: GenMessage<SignedAuthorization>;
+/**
+ * Asks the peer to answer with a Pong at once (RFC 6455 §5.5.2).
+ *
+ * @generated from message leaflow.fleet.control.v1.Ping
+ */
+export type Ping = Message<"leaflow.fleet.control.v1.Ping"> & {
+    /**
+     * A value of the sender's monotonic clock, in milliseconds. Only the
+     * sender interprets it.
+     *
+     * @generated from field: uint64 monotonic_ms = 1;
+     */
+    monotonicMs: bigint;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.Ping.
+ * Use `create(PingSchema)` to create a new message.
+ */
+export declare const PingSchema: GenMessage<Ping>;
+/**
+ * Answers a Ping (RFC 6455 §5.5.3).
+ *
+ * @generated from message leaflow.fleet.control.v1.Pong
+ */
+export type Pong = Message<"leaflow.fleet.control.v1.Pong"> & {
+    /**
+     * Ping.monotonic_ms, unchanged.
+     *
+     * @generated from field: uint64 monotonic_ms = 1;
+     */
+    monotonicMs: bigint;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.Pong.
+ * Use `create(PongSchema)` to create a new message.
+ */
+export declare const PongSchema: GenMessage<Pong>;
+/**
+ * A piece of the encoding of a ClientMessage or ServerMessage larger than
+ * 256 KiB (see Fragments).
+ *
+ * @generated from message leaflow.fleet.control.v1.Fragment
+ */
+export type Fragment = Message<"leaflow.fleet.control.v1.Fragment"> & {
+    /**
+     * Names the message among the messages the sender is sending in fragments
+     * on the connection.
+     *
+     * @generated from field: uint64 message_id = 1;
+     */
+    messageId: bigint;
+    /**
+     * The next bytes of the encoding, at most 256 KiB.
+     *
+     * @generated from field: bytes data = 2;
+     */
+    data: Uint8Array;
+    /**
+     * Set on the last fragment of the message.
+     *
+     * @generated from field: bool final = 3;
+     */
+    final: boolean;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.Fragment.
+ * Use `create(FragmentSchema)` to create a new message.
+ */
+export declare const FragmentSchema: GenMessage<Fragment>;
+/**
+ * Ends the connection in order. The sender then closes the WebSocket with
+ * code 4000 plus the reason's number (RFC 6455 §7.4.2), which stands for the
+ * reason when this message is lost.
+ *
+ * @generated from message leaflow.fleet.control.v1.Close
+ */
+export type Close = Message<"leaflow.fleet.control.v1.Close"> & {
+    /**
+     * Why the connection ends.
+     *
+     * @generated from field: leaflow.fleet.control.v1.CloseReason reason = 1;
+     */
+    reason: CloseReason;
+    /**
+     * Plain text for logs, at most 1024 bytes.
+     *
+     * @generated from field: string reason_phrase = 2;
+     */
+    reasonPhrase: string;
+    /**
+     * How long to wait at least before connecting again (see Reconnection).
+     * Always set with OVERLOADED; set with SERVER_UPGRADE, spread over up to 10
+     * seconds across connections so that they do not all come back at once.
+     *
+     * @generated from field: google.protobuf.Duration retry_delay = 3;
+     */
+    retryDelay?: Duration | undefined;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.Close.
+ * Use `create(CloseSchema)` to create a new message.
+ */
+export declare const CloseSchema: GenMessage<Close>;
+/**
+ * The request of AttachParticipant.
+ *
+ * @generated from message leaflow.fleet.control.v1.AttachParticipantRequest
+ */
+export type AttachParticipantRequest = Message<"leaflow.fleet.control.v1.AttachParticipantRequest"> & {
+    /**
+     * The participant's authorization, the same one the Fleet API returned for
+     * the participant.
+     *
+     * @generated from field: leaflow.fleet.control.v1.SignedAuthorization authorization = 1;
+     */
+    authorization?: SignedAuthorization | undefined;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.AttachParticipantRequest.
+ * Use `create(AttachParticipantRequestSchema)` to create a new message.
+ */
+export declare const AttachParticipantRequestSchema: GenMessage<AttachParticipantRequest>;
+/**
+ * The response of AttachParticipant.
+ *
+ * @generated from message leaflow.fleet.control.v1.AttachParticipantResponse
+ */
+export type AttachParticipantResponse = Message<"leaflow.fleet.control.v1.AttachParticipantResponse"> & {};
+/**
+ * Describes the message leaflow.fleet.control.v1.AttachParticipantResponse.
+ * Use `create(AttachParticipantResponseSchema)` to create a new message.
+ */
+export declare const AttachParticipantResponseSchema: GenMessage<AttachParticipantResponse>;
+/**
+ * The request of UpdateParticipantAuthorization.
+ *
+ * @generated from message leaflow.fleet.control.v1.UpdateParticipantAuthorizationRequest
+ */
+export type UpdateParticipantAuthorizationRequest = Message<"leaflow.fleet.control.v1.UpdateParticipantAuthorizationRequest"> & {
+    /**
+     * The renewed authorization.
+     *
+     * @generated from field: leaflow.fleet.control.v1.SignedAuthorization authorization = 1;
+     */
+    authorization?: SignedAuthorization | undefined;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.UpdateParticipantAuthorizationRequest.
+ * Use `create(UpdateParticipantAuthorizationRequestSchema)` to create a new message.
+ */
+export declare const UpdateParticipantAuthorizationRequestSchema: GenMessage<UpdateParticipantAuthorizationRequest>;
+/**
+ * The response of UpdateParticipantAuthorization.
+ *
+ * @generated from message leaflow.fleet.control.v1.UpdateParticipantAuthorizationResponse
+ */
+export type UpdateParticipantAuthorizationResponse = Message<"leaflow.fleet.control.v1.UpdateParticipantAuthorizationResponse"> & {};
+/**
+ * Describes the message leaflow.fleet.control.v1.UpdateParticipantAuthorizationResponse.
+ * Use `create(UpdateParticipantAuthorizationResponseSchema)` to create a new message.
+ */
+export declare const UpdateParticipantAuthorizationResponseSchema: GenMessage<UpdateParticipantAuthorizationResponse>;
+/**
+ * The request of DetachParticipant.
+ *
+ * @generated from message leaflow.fleet.control.v1.DetachParticipantRequest
+ */
+export type DetachParticipantRequest = Message<"leaflow.fleet.control.v1.DetachParticipantRequest"> & {
+    /**
+     * The participant.
+     *
+     * @generated from field: uint64 participant_id = 1;
+     */
+    participantId: bigint;
+    /**
+     * Why it ends.
+     *
+     * @generated from field: leaflow.fleet.control.v1.ParticipantEndReason reason = 2;
+     */
+    reason: ParticipantEndReason;
+};
+/**
+ * Describes the message leaflow.fleet.control.v1.DetachParticipantRequest.
+ * Use `create(DetachParticipantRequestSchema)` to create a new message.
+ */
+export declare const DetachParticipantRequestSchema: GenMessage<DetachParticipantRequest>;
+/**
+ * The response of DetachParticipant.
+ *
+ * @generated from message leaflow.fleet.control.v1.DetachParticipantResponse
+ */
+export type DetachParticipantResponse = Message<"leaflow.fleet.control.v1.DetachParticipantResponse"> & {};
+/**
+ * Describes the message leaflow.fleet.control.v1.DetachParticipantResponse.
+ * Use `create(DetachParticipantResponseSchema)` to create a new message.
+ */
+export declare const DetachParticipantResponseSchema: GenMessage<DetachParticipantResponse>;
+/**
+ * Why a control connection ends.
+ *
+ * @generated from enum leaflow.fleet.control.v1.CloseReason
+ */
+export declare enum CloseReason {
+    /**
+     * @generated from enum value: CLOSE_REASON_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * An ordinary close. Either side.
+     *
+     * @generated from enum value: CLOSE_REASON_DONE = 1;
+     */
+    DONE = 1,
+    /**
+     * The endpoint goes away. Endpoint only.
+     *
+     * @generated from enum value: CLOSE_REASON_CLIENT_EXIT = 2;
+     */
+    CLIENT_EXIT = 2,
+    /**
+     * The service shuts down. Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_SERVER_SHUTDOWN = 3;
+     */
+    SERVER_SHUTDOWN = 3,
+    /**
+     * The service restarts; connect again after retry_delay. Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_SERVER_UPGRADE = 4;
+     */
+    SERVER_UPGRADE = 4,
+    /**
+     * Nothing arrived for idle_timeout. Either side.
+     *
+     * @generated from enum value: CLOSE_REASON_PING_TIMEOUT = 5;
+     */
+    PING_TIMEOUT = 5,
+    /**
+     * ClientHello did not arrive in time. Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_HELLO_TIMEOUT = 6;
+     */
+    HELLO_TIMEOUT = 6,
+    /**
+     * A malformed or unexpected message. Either side.
+     *
+     * @generated from enum value: CLOSE_REASON_PROTOCOL_ERROR = 7;
+     */
+    PROTOCOL_ERROR = 7,
+    /**
+     * A message larger than max_message_size, or one joined from fragments
+     * larger than 16 MiB. Either side.
+     *
+     * @generated from enum value: CLOSE_REASON_MESSAGE_TOO_BIG = 8;
+     */
+    MESSAGE_TOO_BIG = 8,
+    /**
+     * The credential did not verify, or names an unknown machine or another
+     * key. For a machine credential it is final: the daemon stops and its
+     * machine must enroll again. Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_AUTHENTICATION_FAILED = 9;
+     */
+    AUTHENTICATION_FAILED = 9,
+    /**
+     * The endpoint is known but not allowed, such as the daemon of a removed
+     * machine. Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_PERMISSION_DENIED = 10;
+     */
+    PERMISSION_DENIED = 10,
+    /**
+     * The session named by the credential does not exist or has ended.
+     * Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_SESSION_NOT_FOUND = 11;
+     */
+    SESSION_NOT_FOUND = 11,
+    /**
+     * A newer connection with the same identity replaced this one, such as a
+     * daemon that connected again. Service only.
+     *
+     * @generated from enum value: CLOSE_REASON_CONNECTION_REPLACED = 12;
+     */
+    CONNECTION_REPLACED = 12,
+    /**
+     * The session ends. Session process only, just before its session ends.
+     *
+     * @generated from enum value: CLOSE_REASON_SESSION_EXIT = 13;
+     */
+    SESSION_EXIT = 13,
+    /**
+     * A rule or a rate limit was broken. Either side.
+     *
+     * @generated from enum value: CLOSE_REASON_POLICY_VIOLATION = 16;
+     */
+    POLICY_VIOLATION = 16,
+    /**
+     * The sender failed. Either side.
+     *
+     * @generated from enum value: CLOSE_REASON_INTERNAL_ERROR = 17;
+     */
+    INTERNAL_ERROR = 17,
+    /**
+     * The service cannot serve the connection now, or the endpoint connected
+     * too often; connect again after retry_delay, which is always set. Service
+     * only.
+     *
+     * @generated from enum value: CLOSE_REASON_OVERLOADED = 18;
+     */
+    OVERLOADED = 18,
+    /**
+     * The endpoint did not read what the service sent as it arrived. Service
+     * only.
+     *
+     * @generated from enum value: CLOSE_REASON_ENDPOINT_TOO_SLOW = 19;
+     */
+    ENDPOINT_TOO_SLOW = 19
+}
+/**
+ * Describes the enum leaflow.fleet.control.v1.CloseReason.
+ */
+export declare const CloseReasonSchema: GenEnum<CloseReason>;
+/**
+ * Why a participant ends. The session learns it with DetachParticipant, and the
+ * participant's user through the participant.ended event of the Fleet API.
+ *
+ * @generated from enum leaflow.fleet.control.v1.ParticipantEndReason
+ */
+export declare enum ParticipantEndReason {
+    /**
+     * @generated from enum value: PARTICIPANT_END_REASON_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Its user ended it.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_LEFT = 1;
+     */
+    LEFT = 1,
+    /**
+     * Someone else ended it, such as the owner of the session or an operator.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_REMOVED = 2;
+     */
+    REMOVED = 2,
+    /**
+     * It was not renewed before its lease ran out.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_LEASE_EXPIRED = 3;
+     */
+    LEASE_EXPIRED = 3,
+    /**
+     * Its session ended.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_SESSION_ENDED = 4;
+     */
+    SESSION_ENDED = 4,
+    /**
+     * The session's process did not connect again within Welcome.resume_grace.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_SESSION_PROCESS_LOST = 5;
+     */
+    SESSION_PROCESS_LOST = 5,
+    /**
+     * A permission it was created with was revoked from its user: what the
+     * user is granted in the machine's project no longer covers what it may do.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_PERMISSION_REVOKED = 6;
+     */
+    PERMISSION_REVOKED = 6,
+    /**
+     * Its machine was removed from the project.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_MACHINE_REMOVED = 7;
+     */
+    MACHINE_REMOVED = 7,
+    /**
+     * The key that signed its authorization was revoked.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_KEY_REVOKED = 8;
+     */
+    KEY_REVOKED = 8,
+    /**
+     * Its first PeerConnection did not start, so it was never handed to its
+     * client.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_NOT_ADMITTED = 9;
+     */
+    NOT_ADMITTED = 9,
+    /**
+     * Its user is no longer a member of the machine's project: the user left
+     * or was removed.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_MEMBERSHIP_ENDED = 10;
+     */
+    MEMBERSHIP_ENDED = 10,
+    /**
+     * Its user's account is no longer active: it was suspended or banned, or
+     * its deletion was requested.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_USER_INACTIVE = 11;
+     */
+    USER_INACTIVE = 11,
+    /**
+     * Deletion of the machine's project was requested.
+     *
+     * @generated from enum value: PARTICIPANT_END_REASON_PROJECT_DELETION_REQUESTED = 12;
+     */
+    PROJECT_DELETION_REQUESTED = 12
+}
+/**
+ * Describes the enum leaflow.fleet.control.v1.ParticipantEndReason.
+ */
+export declare const ParticipantEndReasonSchema: GenEnum<ParticipantEndReason>;
+/**
+ * Admits participants to a session and ends them. Served by the session process
+ * on its control connection; the service calls it when a participant
+ * is created, renewed or ends through the Fleet API.
+ *
+ * @generated from service leaflow.fleet.control.v1.ParticipantService
+ */
+export declare const ParticipantService: GenService<{
+    /**
+     * Admits a participant, before any of its signaling. The session verifies
+     * the signature with a key of SigningKeys; that issuer, machine_id and
+     * session_id are its own; and the lifetime. It then accepts the
+     * PeerConnections of participant_id whose participant Hello is signed with
+     * participant_public_key. Attaching an attached participant again with the
+     * same authorization succeeds.
+     *
+     * Fails with PERMISSION_DENIED and reason AUTHORIZATION_INVALID when the
+     * authorization does not verify.
+     *
+     * @generated from rpc leaflow.fleet.control.v1.ParticipantService.AttachParticipant
+     */
+    attachParticipant: {
+        methodKind: "unary";
+        input: typeof AttachParticipantRequestSchema;
+        output: typeof AttachParticipantResponseSchema;
+    };
+    /**
+     * Replaces an attached participant's authorization with a renewed one,
+     * verified as in AttachParticipant. Replacing it with the one the participant
+     * holds already succeeds.
+     *
+     * Fails with:
+     *   - NOT_FOUND and reason PARTICIPANT_NOT_FOUND for a participant not
+     *     attached;
+     *   - PERMISSION_DENIED and reason AUTHORIZATION_INVALID when it does not
+     *     verify;
+     *   - FAILED_PRECONDITION and reason AUTHORIZATION_CHANGED when it differs
+     *     from the current one in more than later issued_at and expires_at.
+     *
+     * @generated from rpc leaflow.fleet.control.v1.ParticipantService.UpdateParticipantAuthorization
+     */
+    updateParticipantAuthorization: {
+        methodKind: "unary";
+        input: typeof UpdateParticipantAuthorizationRequestSchema;
+        output: typeof UpdateParticipantAuthorizationResponseSchema;
+    };
+    /**
+     * Ends a participant. The session closes its PeerConnections and releases
+     * what it held, such as pressed keys and the input lease, and answers once
+     * the participant can do nothing more in the session. Detaching a participant
+     * that is not attached succeeds.
+     *
+     * @generated from rpc leaflow.fleet.control.v1.ParticipantService.DetachParticipant
+     */
+    detachParticipant: {
+        methodKind: "unary";
+        input: typeof DetachParticipantRequestSchema;
+        output: typeof DetachParticipantResponseSchema;
+    };
+}>;