@liquidmetal-ai/drizzle 0.7.0 → 0.8.1

package/src/liquidmetal/v1alpha1/workos_integration_pb.ts

@@ -0,0 +1,950 @@
+// @generated by protoc-gen-es v2.2.5 with parameter "target=ts,import_extension=.js"
+// @generated from file liquidmetal/v1alpha1/workos_integration.proto (package liquidmetal.v1alpha1, syntax proto3)
+/* eslint-disable */
+
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv1";
+import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv1";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file liquidmetal/v1alpha1/workos_integration.proto.
+ */
+export const file_liquidmetal_v1alpha1_workos_integration: GenFile = /*@__PURE__*/
+  fileDesc("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", [file_google_protobuf_timestamp]);
+
+/**
+ * Team represents a WorkOS team.
+ *
+ * @generated from message liquidmetal.v1alpha1.Team
+ */
+export type Team = Message<"liquidmetal.v1alpha1.Team"> & {
+  /**
+   * WorkOS team ID
+   *
+   * @generated from field: string id = 1;
+   */
+  id: string;
+
+  /**
+   * Team name
+   *
+   * @generated from field: string name = 2;
+   */
+  name: string;
+
+  /**
+   * When the team was created
+   *
+   * @generated from field: google.protobuf.Timestamp created_at = 3;
+   */
+  createdAt?: Timestamp;
+
+  /**
+   * When the team was last updated
+   *
+   * @generated from field: google.protobuf.Timestamp updated_at = 4;
+   */
+  updatedAt?: Timestamp;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.Team.
+ * Use `create(TeamSchema)` to create a new message.
+ */
+export const TeamSchema: GenMessage<Team> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 0);
+
+/**
+ * Environment represents a WorkOS environment for a Raindrop app.
+ * Note: This message does NOT include the API key value, which is stored securely.
+ *
+ * @generated from message liquidmetal.v1alpha1.Environment
+ */
+export type Environment = Message<"liquidmetal.v1alpha1.Environment"> & {
+  /**
+   * Environment name (matches Raindrop app name)
+   *
+   * @generated from field: string name = 1;
+   */
+  name: string;
+
+  /**
+   * WorkOS environment ID
+   *
+   * @generated from field: string environment_id = 2;
+   */
+  environmentId: string;
+
+  /**
+   * WorkOS client ID for this environment
+   *
+   * @generated from field: string client_id = 3;
+   */
+  clientId: string;
+
+  /**
+   * Environment type (staging or production)
+   *
+   * @generated from field: liquidmetal.v1alpha1.EnvironmentType environment_type = 4;
+   */
+  environmentType: EnvironmentType;
+
+  /**
+   * WorkOS Connect hostname for this environment
+   * This is the Connect domain hostname used for OIDC authentication flows
+   *
+   * @generated from field: optional string workos_connect_hostname = 5;
+   */
+  workosConnectHostname?: string;
+
+  /**
+   * WorkOS API hostname (typically api.workos.com)
+   *
+   * @generated from field: optional string workos_api_hostname = 6;
+   */
+  workosApiHostname?: string;
+
+  /**
+   * WorkOS organization ID for this environment
+   *
+   * @generated from field: optional string workos_organization_id = 7;
+   */
+  workosOrganizationId?: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.Environment.
+ * Use `create(EnvironmentSchema)` to create a new message.
+ */
+export const EnvironmentSchema: GenMessage<Environment> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 1);
+
+/**
+ * CreateTeamRequest activates WorkOS integration for an organization.
+ *
+ * @generated from message liquidmetal.v1alpha1.CreateTeamRequest
+ */
+export type CreateTeamRequest = Message<"liquidmetal.v1alpha1.CreateTeamRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization to activate WorkOS integration for
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Email address for the team admin
+   * This will receive an invitation to join the team
+   *
+   * @generated from field: string admin_email = 3;
+   */
+  adminEmail: string;
+
+  /**
+   * Optional name for the WorkOS team.
+   * If provided, this name will be cached for future use.
+   * If not provided, the cached primary organization name (from bootstrap or previous call) will be used.
+   * If neither is available, an error will be returned.
+   *
+   * @generated from field: optional string name = 4;
+   */
+  name?: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.CreateTeamRequest.
+ * Use `create(CreateTeamRequestSchema)` to create a new message.
+ */
+export const CreateTeamRequestSchema: GenMessage<CreateTeamRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 2);
+
+/**
+ * CreateTeamResponse returns the created WorkOS team details.
+ *
+ * @generated from message liquidmetal.v1alpha1.CreateTeamResponse
+ */
+export type CreateTeamResponse = Message<"liquidmetal.v1alpha1.CreateTeamResponse"> & {
+  /**
+   * @generated from field: liquidmetal.v1alpha1.Team team = 1;
+   */
+  team?: Team;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.CreateTeamResponse.
+ * Use `create(CreateTeamResponseSchema)` to create a new message.
+ */
+export const CreateTeamResponseSchema: GenMessage<CreateTeamResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 3);
+
+/**
+ * CreateEnvironmentRequest creates a WorkOS environment and API key for a Raindrop app.
+ *
+ * @generated from message liquidmetal.v1alpha1.CreateEnvironmentRequest
+ */
+export type CreateEnvironmentRequest = Message<"liquidmetal.v1alpha1.CreateEnvironmentRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization the environment belongs to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Name for the environment (must match Raindrop app name)
+   *
+   * @generated from field: string environment_name = 3;
+   */
+  environmentName: string;
+
+  /**
+   * Type of environment to create (currently only STAGING is supported)
+   *
+   * @generated from field: liquidmetal.v1alpha1.EnvironmentType environment_type = 4;
+   */
+  environmentType: EnvironmentType;
+
+  /**
+   * Optional primary organization name for the WorkOS organization to create.
+   * If provided, this name will be cached for future use.
+   * If not provided, the cached name (from bootstrap or previous call) will be used.
+   * If neither is available, an error will be returned.
+   *
+   * @generated from field: optional string primary_organization_name = 5;
+   */
+  primaryOrganizationName?: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.CreateEnvironmentRequest.
+ * Use `create(CreateEnvironmentRequestSchema)` to create a new message.
+ */
+export const CreateEnvironmentRequestSchema: GenMessage<CreateEnvironmentRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 4);
+
+/**
+ * CreateEnvironmentResponse confirms environment creation.
+ *
+ * @generated from message liquidmetal.v1alpha1.CreateEnvironmentResponse
+ */
+export type CreateEnvironmentResponse = Message<"liquidmetal.v1alpha1.CreateEnvironmentResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.CreateEnvironmentResponse.
+ * Use `create(CreateEnvironmentResponseSchema)` to create a new message.
+ */
+export const CreateEnvironmentResponseSchema: GenMessage<CreateEnvironmentResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 5);
+
+/**
+ * SetEnvironmentRequest manually configures all WorkOS environment details for a Raindrop app.
+ *
+ * @generated from message liquidmetal.v1alpha1.SetEnvironmentRequest
+ */
+export type SetEnvironmentRequest = Message<"liquidmetal.v1alpha1.SetEnvironmentRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization the environment belongs to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Name for the environment (must match Raindrop app name)
+   *
+   * @generated from field: string environment_name = 3;
+   */
+  environmentName: string;
+
+  /**
+   * WorkOS environment ID
+   *
+   * @generated from field: string environment_id = 4;
+   */
+  environmentId: string;
+
+  /**
+   * WorkOS client ID
+   *
+   * @generated from field: string client_id = 5;
+   */
+  clientId: string;
+
+  /**
+   * WorkOS API key value (secret)
+   *
+   * @generated from field: string api_key_value = 6;
+   */
+  apiKeyValue: string;
+
+  /**
+   * Environment type
+   *
+   * @generated from field: liquidmetal.v1alpha1.EnvironmentType environment_type = 7;
+   */
+  environmentType: EnvironmentType;
+
+  /**
+   * WorkOS organization ID for this environment
+   *
+   * @generated from field: string workos_organization_id = 8;
+   */
+  workosOrganizationId: string;
+
+  /**
+   * WorkOS Connect hostname for OIDC authentication
+   *
+   * @generated from field: string workos_connect_hostname = 9;
+   */
+  workosConnectHostname: string;
+
+  /**
+   * WorkOS API hostname (defaults to api.workos.com if not provided)
+   *
+   * @generated from field: optional string workos_api_hostname = 10;
+   */
+  workosApiHostname?: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.SetEnvironmentRequest.
+ * Use `create(SetEnvironmentRequestSchema)` to create a new message.
+ */
+export const SetEnvironmentRequestSchema: GenMessage<SetEnvironmentRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 6);
+
+/**
+ * SetEnvironmentResponse confirms environment configuration.
+ *
+ * @generated from message liquidmetal.v1alpha1.SetEnvironmentResponse
+ */
+export type SetEnvironmentResponse = Message<"liquidmetal.v1alpha1.SetEnvironmentResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.SetEnvironmentResponse.
+ * Use `create(SetEnvironmentResponseSchema)` to create a new message.
+ */
+export const SetEnvironmentResponseSchema: GenMessage<SetEnvironmentResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 7);
+
+/**
+ * DeleteEnvironmentRequest removes environment configuration.
+ *
+ * @generated from message liquidmetal.v1alpha1.DeleteEnvironmentRequest
+ */
+export type DeleteEnvironmentRequest = Message<"liquidmetal.v1alpha1.DeleteEnvironmentRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization the environment belongs to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Name of the environment to delete (matches Raindrop app name)
+   *
+   * @generated from field: string environment_name = 3;
+   */
+  environmentName: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.DeleteEnvironmentRequest.
+ * Use `create(DeleteEnvironmentRequestSchema)` to create a new message.
+ */
+export const DeleteEnvironmentRequestSchema: GenMessage<DeleteEnvironmentRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 8);
+
+/**
+ * DeleteEnvironmentResponse confirms environment deletion.
+ *
+ * @generated from message liquidmetal.v1alpha1.DeleteEnvironmentResponse
+ */
+export type DeleteEnvironmentResponse = Message<"liquidmetal.v1alpha1.DeleteEnvironmentResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.DeleteEnvironmentResponse.
+ * Use `create(DeleteEnvironmentResponseSchema)` to create a new message.
+ */
+export const DeleteEnvironmentResponseSchema: GenMessage<DeleteEnvironmentResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 9);
+
+/**
+ * GetTeamRequest retrieves WorkOS team information.
+ *
+ * @generated from message liquidmetal.v1alpha1.GetTeamRequest
+ */
+export type GetTeamRequest = Message<"liquidmetal.v1alpha1.GetTeamRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization to get team information for
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.GetTeamRequest.
+ * Use `create(GetTeamRequestSchema)` to create a new message.
+ */
+export const GetTeamRequestSchema: GenMessage<GetTeamRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 10);
+
+/**
+ * GetTeamResponse returns the WorkOS team details.
+ *
+ * @generated from message liquidmetal.v1alpha1.GetTeamResponse
+ */
+export type GetTeamResponse = Message<"liquidmetal.v1alpha1.GetTeamResponse"> & {
+  /**
+   * @generated from field: liquidmetal.v1alpha1.Team team = 1;
+   */
+  team?: Team;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.GetTeamResponse.
+ * Use `create(GetTeamResponseSchema)` to create a new message.
+ */
+export const GetTeamResponseSchema: GenMessage<GetTeamResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 11);
+
+/**
+ * ListEnvironmentsRequest retrieves all WorkOS environments for an organization.
+ *
+ * @generated from message liquidmetal.v1alpha1.ListEnvironmentsRequest
+ */
+export type ListEnvironmentsRequest = Message<"liquidmetal.v1alpha1.ListEnvironmentsRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization to list environments for
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.ListEnvironmentsRequest.
+ * Use `create(ListEnvironmentsRequestSchema)` to create a new message.
+ */
+export const ListEnvironmentsRequestSchema: GenMessage<ListEnvironmentsRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 12);
+
+/**
+ * ListEnvironmentsResponse returns all environments.
+ *
+ * @generated from message liquidmetal.v1alpha1.ListEnvironmentsResponse
+ */
+export type ListEnvironmentsResponse = Message<"liquidmetal.v1alpha1.ListEnvironmentsResponse"> & {
+  /**
+   * @generated from field: repeated liquidmetal.v1alpha1.Environment environments = 1;
+   */
+  environments: Environment[];
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.ListEnvironmentsResponse.
+ * Use `create(ListEnvironmentsResponseSchema)` to create a new message.
+ */
+export const ListEnvironmentsResponseSchema: GenMessage<ListEnvironmentsResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 13);
+
+/**
+ * GetEnvironmentRequest retrieves a specific WorkOS environment.
+ *
+ * @generated from message liquidmetal.v1alpha1.GetEnvironmentRequest
+ */
+export type GetEnvironmentRequest = Message<"liquidmetal.v1alpha1.GetEnvironmentRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization the environment belongs to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Name of the environment (matches Raindrop app name)
+   *
+   * @generated from field: string environment_name = 3;
+   */
+  environmentName: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.GetEnvironmentRequest.
+ * Use `create(GetEnvironmentRequestSchema)` to create a new message.
+ */
+export const GetEnvironmentRequestSchema: GenMessage<GetEnvironmentRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 14);
+
+/**
+ * GetEnvironmentResponse returns the environment details.
+ *
+ * @generated from message liquidmetal.v1alpha1.GetEnvironmentResponse
+ */
+export type GetEnvironmentResponse = Message<"liquidmetal.v1alpha1.GetEnvironmentResponse"> & {
+  /**
+   * @generated from field: liquidmetal.v1alpha1.Environment environment = 1;
+   */
+  environment?: Environment;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.GetEnvironmentResponse.
+ * Use `create(GetEnvironmentResponseSchema)` to create a new message.
+ */
+export const GetEnvironmentResponseSchema: GenMessage<GetEnvironmentResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 15);
+
+/**
+ * InviteTeamMemberRequest sends an invitation to join the WorkOS team.
+ *
+ * @generated from message liquidmetal.v1alpha1.InviteTeamMemberRequest
+ */
+export type InviteTeamMemberRequest = Message<"liquidmetal.v1alpha1.InviteTeamMemberRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization whose team to invite the user to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Email address to send the invitation to
+   *
+   * @generated from field: string email = 3;
+   */
+  email: string;
+
+  /**
+   * Role for the invited user (e.g., "admin", "member")
+   *
+   * @generated from field: string role_slug = 4;
+   */
+  roleSlug: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.InviteTeamMemberRequest.
+ * Use `create(InviteTeamMemberRequestSchema)` to create a new message.
+ */
+export const InviteTeamMemberRequestSchema: GenMessage<InviteTeamMemberRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 16);
+
+/**
+ * InviteTeamMemberResponse confirms the invitation was sent.
+ *
+ * @generated from message liquidmetal.v1alpha1.InviteTeamMemberResponse
+ */
+export type InviteTeamMemberResponse = Message<"liquidmetal.v1alpha1.InviteTeamMemberResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.InviteTeamMemberResponse.
+ * Use `create(InviteTeamMemberResponseSchema)` to create a new message.
+ */
+export const InviteTeamMemberResponseSchema: GenMessage<InviteTeamMemberResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 17);
+
+/**
+ * DeleteAllWorkOSStateRequest removes all WorkOS configuration from the organization's state.
+ *
+ * @generated from message liquidmetal.v1alpha1.DeleteAllWorkOSStateRequest
+ */
+export type DeleteAllWorkOSStateRequest = Message<"liquidmetal.v1alpha1.DeleteAllWorkOSStateRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization whose WorkOS state should be deleted
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.DeleteAllWorkOSStateRequest.
+ * Use `create(DeleteAllWorkOSStateRequestSchema)` to create a new message.
+ */
+export const DeleteAllWorkOSStateRequestSchema: GenMessage<DeleteAllWorkOSStateRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 18);
+
+/**
+ * DeleteAllWorkOSStateResponse confirms the deletion.
+ *
+ * @generated from message liquidmetal.v1alpha1.DeleteAllWorkOSStateResponse
+ */
+export type DeleteAllWorkOSStateResponse = Message<"liquidmetal.v1alpha1.DeleteAllWorkOSStateResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.DeleteAllWorkOSStateResponse.
+ * Use `create(DeleteAllWorkOSStateResponseSchema)` to create a new message.
+ */
+export const DeleteAllWorkOSStateResponseSchema: GenMessage<DeleteAllWorkOSStateResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 19);
+
+/**
+ * AttachEnvironmentToVersionRequest links a version to a WorkOS environment.
+ *
+ * @generated from message liquidmetal.v1alpha1.AttachEnvironmentToVersionRequest
+ */
+export type AttachEnvironmentToVersionRequest = Message<"liquidmetal.v1alpha1.AttachEnvironmentToVersionRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization the application belongs to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Application name
+   *
+   * @generated from field: string application_name = 3;
+   */
+  applicationName: string;
+
+  /**
+   * Version ID to attach the environment to
+   *
+   * @generated from field: string version_id = 4;
+   */
+  versionId: string;
+
+  /**
+   * Name of the WorkOS environment to attach (must already be configured)
+   *
+   * @generated from field: string environment_name = 5;
+   */
+  environmentName: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.AttachEnvironmentToVersionRequest.
+ * Use `create(AttachEnvironmentToVersionRequestSchema)` to create a new message.
+ */
+export const AttachEnvironmentToVersionRequestSchema: GenMessage<AttachEnvironmentToVersionRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 20);
+
+/**
+ * AttachEnvironmentToVersionResponse confirms the attachment.
+ *
+ * @generated from message liquidmetal.v1alpha1.AttachEnvironmentToVersionResponse
+ */
+export type AttachEnvironmentToVersionResponse = Message<"liquidmetal.v1alpha1.AttachEnvironmentToVersionResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.AttachEnvironmentToVersionResponse.
+ * Use `create(AttachEnvironmentToVersionResponseSchema)` to create a new message.
+ */
+export const AttachEnvironmentToVersionResponseSchema: GenMessage<AttachEnvironmentToVersionResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 21);
+
+/**
+ * DetachEnvironmentFromVersionRequest unlinks a version from its WorkOS environment.
+ *
+ * @generated from message liquidmetal.v1alpha1.DetachEnvironmentFromVersionRequest
+ */
+export type DetachEnvironmentFromVersionRequest = Message<"liquidmetal.v1alpha1.DetachEnvironmentFromVersionRequest"> & {
+  /**
+   * User making the request
+   *
+   * @generated from field: string user_id = 1;
+   */
+  userId: string;
+
+  /**
+   * Organization the application belongs to
+   *
+   * @generated from field: string organization_id = 2;
+   */
+  organizationId: string;
+
+  /**
+   * Application name
+   *
+   * @generated from field: string application_name = 3;
+   */
+  applicationName: string;
+
+  /**
+   * Version ID to detach the environment from
+   *
+   * @generated from field: string version_id = 4;
+   */
+  versionId: string;
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.DetachEnvironmentFromVersionRequest.
+ * Use `create(DetachEnvironmentFromVersionRequestSchema)` to create a new message.
+ */
+export const DetachEnvironmentFromVersionRequestSchema: GenMessage<DetachEnvironmentFromVersionRequest> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 22);
+
+/**
+ * DetachEnvironmentFromVersionResponse confirms the detachment.
+ *
+ * @generated from message liquidmetal.v1alpha1.DetachEnvironmentFromVersionResponse
+ */
+export type DetachEnvironmentFromVersionResponse = Message<"liquidmetal.v1alpha1.DetachEnvironmentFromVersionResponse"> & {
+};
+
+/**
+ * Describes the message liquidmetal.v1alpha1.DetachEnvironmentFromVersionResponse.
+ * Use `create(DetachEnvironmentFromVersionResponseSchema)` to create a new message.
+ */
+export const DetachEnvironmentFromVersionResponseSchema: GenMessage<DetachEnvironmentFromVersionResponse> = /*@__PURE__*/
+  messageDesc(file_liquidmetal_v1alpha1_workos_integration, 23);
+
+/**
+ * EnvironmentType indicates whether a WorkOS environment is staging or production.
+ * Currently only STAGING environments can be created.
+ *
+ * @generated from enum liquidmetal.v1alpha1.EnvironmentType
+ */
+export enum EnvironmentType {
+  /**
+   * @generated from enum value: ENVIRONMENT_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * @generated from enum value: ENVIRONMENT_TYPE_STAGING = 1;
+   */
+  STAGING = 1,
+
+  /**
+   * @generated from enum value: ENVIRONMENT_TYPE_PRODUCTION = 2;
+   */
+  PRODUCTION = 2,
+}
+
+/**
+ * Describes the enum liquidmetal.v1alpha1.EnvironmentType.
+ */
+export const EnvironmentTypeSchema: GenEnum<EnvironmentType> = /*@__PURE__*/
+  enumDesc(file_liquidmetal_v1alpha1_workos_integration, 0);
+
+/**
+ * WorkOSIntegrationService provides integration with WorkOS Platform API for
+ * authentication and team management.
+ *
+ * The service maps LiquidMetal concepts to WorkOS concepts:
+ * - 1 LiquidMetal organization = 1 WorkOS team
+ * - 1 Raindrop app (all versions) = 1 WorkOS environment = 1 API key
+ * - Environment name = Raindrop app name
+ *
+ * @generated from service liquidmetal.v1alpha1.WorkOSIntegrationService
+ */
+export const WorkOSIntegrationService: GenService<{
+  /**
+   * CreateTeam activates WorkOS integration for an organization by creating a
+   * WorkOS team.
+   *
+   * Error handling:
+   * - If a user with the admin email already exists in WorkOS, this will return
+   *   an error. The caller should prompt the user to use a different email address.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.CreateTeam
+   */
+  createTeam: {
+    methodKind: "unary";
+    input: typeof CreateTeamRequestSchema;
+    output: typeof CreateTeamResponseSchema;
+  },
+  /**
+   * CreateEnvironment creates a WorkOS environment for a Raindrop app and
+   * automatically generates an API key for that environment.
+   *
+   * The environment name must match the Raindrop app name.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.CreateEnvironment
+   */
+  createEnvironment: {
+    methodKind: "unary";
+    input: typeof CreateEnvironmentRequestSchema;
+    output: typeof CreateEnvironmentResponseSchema;
+  },
+  /**
+   * SetEnvironment manually configures all WorkOS environment details for a Raindrop app.
+   * This allows integration with an existing, fully-configured WorkOS environment
+   * (including production environments) without calling CreateEnvironment.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.SetEnvironment
+   */
+  setEnvironment: {
+    methodKind: "unary";
+    input: typeof SetEnvironmentRequestSchema;
+    output: typeof SetEnvironmentResponseSchema;
+  },
+  /**
+   * DeleteEnvironment removes the WorkOS environment configuration.
+   * This does NOT delete the environment from WorkOS - users must manage that
+   * in the WorkOS dashboard.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.DeleteEnvironment
+   */
+  deleteEnvironment: {
+    methodKind: "unary";
+    input: typeof DeleteEnvironmentRequestSchema;
+    output: typeof DeleteEnvironmentResponseSchema;
+  },
+  /**
+   * GetTeam retrieves the WorkOS team information for an organization.
+   * Returns an error if WorkOS integration has not been activated.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.GetTeam
+   */
+  getTeam: {
+    methodKind: "unary";
+    input: typeof GetTeamRequestSchema;
+    output: typeof GetTeamResponseSchema;
+  },
+  /**
+   * ListEnvironments returns all WorkOS environments for an organization.
+   * Each environment corresponds to a Raindrop app.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.ListEnvironments
+   */
+  listEnvironments: {
+    methodKind: "unary";
+    input: typeof ListEnvironmentsRequestSchema;
+    output: typeof ListEnvironmentsResponseSchema;
+  },
+  /**
+   * GetEnvironment retrieves WorkOS environment details for a specific Raindrop app.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.GetEnvironment
+   */
+  getEnvironment: {
+    methodKind: "unary";
+    input: typeof GetEnvironmentRequestSchema;
+    output: typeof GetEnvironmentResponseSchema;
+  },
+  /**
+   * AttachEnvironmentToVersion configures an application version to use a WorkOS environment.
+   * This sets the WORKOS_ENVIRONMENT system environment variable for the version, enabling
+   * WorkOS authentication for protected services and actors.
+   *
+   * The environment must already be configured via CreateEnvironment or SetEnvironment.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.AttachEnvironmentToVersion
+   */
+  attachEnvironmentToVersion: {
+    methodKind: "unary";
+    input: typeof AttachEnvironmentToVersionRequestSchema;
+    output: typeof AttachEnvironmentToVersionResponseSchema;
+  },
+  /**
+   * DetachEnvironmentFromVersion removes WorkOS environment configuration from an application version.
+   * This deletes the WORKOS_ENVIRONMENT system environment variable, disabling WorkOS authentication
+   * for the version's protected services and actors.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.DetachEnvironmentFromVersion
+   */
+  detachEnvironmentFromVersion: {
+    methodKind: "unary";
+    input: typeof DetachEnvironmentFromVersionRequestSchema;
+    output: typeof DetachEnvironmentFromVersionResponseSchema;
+  },
+  /**
+   * InviteTeamMember sends an invitation for a user to join the WorkOS team.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.InviteTeamMember
+   */
+  inviteTeamMember: {
+    methodKind: "unary";
+    input: typeof InviteTeamMemberRequestSchema;
+    output: typeof InviteTeamMemberResponseSchema;
+  },
+  /**
+   * DeleteAllWorkOSState removes all WorkOS-related configuration from the organization's state.
+   * This includes the team information, all environment configurations, and API keys.
+   * WARNING: This is a destructive operation that cannot be undone.
+   * This does NOT delete anything from WorkOS - only local state is affected.
+   *
+   * @generated from rpc liquidmetal.v1alpha1.WorkOSIntegrationService.DeleteAllWorkOSState
+   */
+  deleteAllWorkOSState: {
+    methodKind: "unary";
+    input: typeof DeleteAllWorkOSStateRequestSchema;
+    output: typeof DeleteAllWorkOSStateResponseSchema;
+  },
+}> = /*@__PURE__*/
+  serviceDesc(file_liquidmetal_v1alpha1_workos_integration, 0);
+