@loams/client 0.0.0-stage → 0.1.0

package/dist/vendor/proto/gen/loams/instance/v1/instance_pb.d.ts

@@ -0,0 +1,501 @@
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file loams/instance/v1/instance.proto.
+ */
+export declare const file_loams_instance_v1_instance: GenFile;
+/**
+ * @generated from message loams.instance.v1.GetInstanceRequest
+ */
+export type GetInstanceRequest = Message<"loams.instance.v1.GetInstanceRequest"> & {};
+/**
+ * Describes the message loams.instance.v1.GetInstanceRequest.
+ * Use `create(GetInstanceRequestSchema)` to create a new message.
+ */
+export declare const GetInstanceRequestSchema: GenMessage<GetInstanceRequest>;
+/**
+ * @generated from message loams.instance.v1.GetInstanceResponse
+ */
+export type GetInstanceResponse = Message<"loams.instance.v1.GetInstanceResponse"> & {
+    /**
+     * A ULID, stable for the lifetime of the install.
+     *
+     * @generated from field: string instance_id = 1;
+     */
+    instanceId: string;
+    /**
+     * The instance's display name (OpenAPI `Instance.name`).
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * @generated from field: loams.instance.v1.Edition edition = 3;
+     */
+    edition: Edition;
+    /**
+     * The server's semver (OpenAPI `Instance.version`).
+     *
+     * @generated from field: string server_version = 4;
+     */
+    serverVersion: string;
+    /**
+     * The proto packages this instance serves, for example
+     * "loams.approvals.v1". The console provides an `rpc.<service>` only for a
+     * listed package (AP1a Ruling 6). The same list, with what is *not*
+     * served, is `services`.
+     *
+     * @generated from field: repeated string api_versions = 5;
+     */
+    apiVersions: string[];
+    /**
+     * Feature flags, for example {"billing": false, "passkeys": true}.
+     *
+     * @generated from field: map<string, bool> features = 6;
+     */
+    features: {
+        [key: string]: boolean;
+    };
+    /**
+     * The Loams gateway: the OAuth authorization server for Loams tokens
+     * (pairing grant, RFC 8693 exchange, refresh). Empty before the auth plan.
+     *
+     * @generated from field: string issuer = 7;
+     */
+    issuer: string;
+    /**
+     * The JWKS of the instance's token-signing keys.
+     *
+     * @generated from field: string jwks_uri = 8;
+     */
+    jwksUri: string;
+    /**
+     * How people sign in. Authentik is the identity provider (§37 §6.5).
+     *
+     * @generated from field: repeated loams.instance.v1.SignInMethod sign_in_methods = 9;
+     */
+    signInMethods: SignInMethod[];
+    /**
+     * A compact JWS, signed by the instance key, listing the current and next
+     * TLS SPKI hashes (§37 §7.2.3). Empty for instances with public CAs only.
+     *
+     * @generated from field: string tls_pins = 10;
+     */
+    tlsPins: string;
+    /**
+     * Present when the instance pushes to phones (§37 §7.4).
+     *
+     * @generated from field: loams.instance.v1.PushConfig push = 11;
+     */
+    push?: PushConfig | undefined;
+    /**
+     * The minimum app version per platform: keys "ios", "android", "desktop".
+     *
+     * @generated from field: map<string, string> min_app_versions = 12;
+     */
+    minAppVersions: {
+        [key: string]: string;
+    };
+    /**
+     * True until first-run setup has created the org and its owner.
+     *
+     * @generated from field: bool setup_required = 13;
+     */
+    setupRequired: boolean;
+    /**
+     * Set during a signing-key rotation: the new key's thumbprint, signed by
+     * the old key (§37 §7.2.3).
+     *
+     * @generated from field: string key_rotation = 14;
+     */
+    keyRotation: string;
+    /**
+     * The public packages of the API catalogue (design §44 §4, D600) that
+     * exist, and whether this binary serves each. A package whose engine is
+     * not in the build variant (§30 §9) is listed with `available = false`, and
+     * its RPCs answer `unimplemented` with reason `feature_not_in_variant`, so
+     * an SDK feature-detects from this list instead of by calling and reading
+     * the error. A package whose services have not been defined yet has no
+     * entry, so this list never advertises a contract that does not exist. It
+     * is the long form of `api_versions`, which lists only what is served.
+     *
+     * @generated from field: repeated loams.instance.v1.ServiceStatus services = 15;
+     */
+    services: ServiceStatus[];
+};
+/**
+ * Describes the message loams.instance.v1.GetInstanceResponse.
+ * Use `create(GetInstanceResponseSchema)` to create a new message.
+ */
+export declare const GetInstanceResponseSchema: GenMessage<GetInstanceResponse>;
+/**
+ * One package of the API catalogue and what this binary does with it.
+ *
+ * @generated from message loams.instance.v1.ServiceStatus
+ */
+export type ServiceStatus = Message<"loams.instance.v1.ServiceStatus"> & {
+    /**
+     * The proto package, for example "loams.collection.v1".
+     *
+     * @generated from field: string package = 1;
+     */
+    package: string;
+    /**
+     * The package's API version, for example "v1".
+     *
+     * @generated from field: string version = 2;
+     */
+    version: string;
+    /**
+     * Whether this binary serves the package. False means every one of its RPCs
+     * answers `unimplemented` with reason `feature_not_in_variant`.
+     *
+     * @generated from field: bool available = 3;
+     */
+    available: boolean;
+    /**
+     * The services in the package, fully qualified, for example
+     * "loams.collection.v1.CollectionService".
+     *
+     * @generated from field: repeated string services = 4;
+     */
+    services: string[];
+    /**
+     * True for a package whose wire contract may still change
+     * (`loams.options.v1.ModuleOptions.unstable`, §44 §10.3).
+     *
+     * @generated from field: bool unstable = 5;
+     */
+    unstable: boolean;
+};
+/**
+ * Describes the message loams.instance.v1.ServiceStatus.
+ * Use `create(ServiceStatusSchema)` to create a new message.
+ */
+export declare const ServiceStatusSchema: GenMessage<ServiceStatus>;
+/**
+ * @generated from message loams.instance.v1.SignInMethod
+ */
+export type SignInMethod = Message<"loams.instance.v1.SignInMethod"> & {
+    /**
+     * @generated from field: loams.instance.v1.SignInKind kind = 1;
+     */
+    kind: SignInKind;
+    /**
+     * The OIDC issuer for KIND_AUTHENTIK (Authentik's application issuer URL).
+     *
+     * @generated from field: string issuer = 2;
+     */
+    issuer: string;
+    /**
+     * The public OAuth client id for this app, for example "loams-desktop".
+     *
+     * @generated from field: string client_id = 3;
+     */
+    clientId: string;
+    /**
+     * A label to show on the sign-in button.
+     *
+     * @generated from field: string display_name = 4;
+     */
+    displayName: string;
+};
+/**
+ * Describes the message loams.instance.v1.SignInMethod.
+ * Use `create(SignInMethodSchema)` to create a new message.
+ */
+export declare const SignInMethodSchema: GenMessage<SignInMethod>;
+/**
+ * @generated from message loams.instance.v1.PushConfig
+ */
+export type PushConfig = Message<"loams.instance.v1.PushConfig"> & {
+    /**
+     * The push gateway, for example "https://push.loams.dev".
+     *
+     * @generated from field: string gateway_url = 1;
+     */
+    gatewayUrl: string;
+    /**
+     * App ids per platform: "ios" → bundle id, "android" → package name.
+     *
+     * @generated from field: map<string, string> app_ids = 2;
+     */
+    appIds: {
+        [key: string]: string;
+    };
+    /**
+     * Whether UnifiedPush endpoints are accepted (Android without Google).
+     *
+     * @generated from field: bool unifiedpush = 3;
+     */
+    unifiedpush: boolean;
+};
+/**
+ * Describes the message loams.instance.v1.PushConfig.
+ * Use `create(PushConfigSchema)` to create a new message.
+ */
+export declare const PushConfigSchema: GenMessage<PushConfig>;
+/**
+ * @generated from message loams.instance.v1.WhoAmIRequest
+ */
+export type WhoAmIRequest = Message<"loams.instance.v1.WhoAmIRequest"> & {};
+/**
+ * Describes the message loams.instance.v1.WhoAmIRequest.
+ * Use `create(WhoAmIRequestSchema)` to create a new message.
+ */
+export declare const WhoAmIRequestSchema: GenMessage<WhoAmIRequest>;
+/**
+ * @generated from message loams.instance.v1.WhoAmIResponse
+ */
+export type WhoAmIResponse = Message<"loams.instance.v1.WhoAmIResponse"> & {
+    /**
+     * @generated from field: loams.instance.v1.Principal principal = 1;
+     */
+    principal?: Principal | undefined;
+    /**
+     * The RFC 8693 `act` chain, outermost first: an agent acting for a user
+     * lists the agent here and the user as `principal`.
+     *
+     * @generated from field: repeated loams.instance.v1.Principal actor_chain = 2;
+     */
+    actorChain: Principal[];
+    /**
+     * @generated from field: loams.instance.v1.Org org = 3;
+     */
+    org?: Org | undefined;
+    /**
+     * @generated from field: repeated loams.instance.v1.Environment environments = 4;
+     */
+    environments: Environment[];
+    /**
+     * The device this token is bound to, when it was issued to a device.
+     *
+     * @generated from field: loams.instance.v1.DeviceRef device = 5;
+     */
+    device?: DeviceRef | undefined;
+    /**
+     * When the session last authenticated the person; the step-up rule of
+     * AP0 Ruling 7 compares it to now.
+     *
+     * @generated from field: google.protobuf.Timestamp authenticated_at = 6;
+     */
+    authenticatedAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message loams.instance.v1.WhoAmIResponse.
+ * Use `create(WhoAmIResponseSchema)` to create a new message.
+ */
+export declare const WhoAmIResponseSchema: GenMessage<WhoAmIResponse>;
+/**
+ * @generated from message loams.instance.v1.Principal
+ */
+export type Principal = Message<"loams.instance.v1.Principal"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: loams.instance.v1.PrincipalKind kind = 2;
+     */
+    kind: PrincipalKind;
+    /**
+     * @generated from field: string display_name = 3;
+     */
+    displayName: string;
+    /**
+     * Users only.
+     *
+     * @generated from field: string email = 4;
+     */
+    email: string;
+};
+/**
+ * Describes the message loams.instance.v1.Principal.
+ * Use `create(PrincipalSchema)` to create a new message.
+ */
+export declare const PrincipalSchema: GenMessage<Principal>;
+/**
+ * @generated from message loams.instance.v1.Org
+ */
+export type Org = Message<"loams.instance.v1.Org"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+};
+/**
+ * Describes the message loams.instance.v1.Org.
+ * Use `create(OrgSchema)` to create a new message.
+ */
+export declare const OrgSchema: GenMessage<Org>;
+/**
+ * @generated from message loams.instance.v1.Environment
+ */
+export type Environment = Message<"loams.instance.v1.Environment"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * The project's id.
+     *
+     * @generated from field: string project = 2;
+     */
+    project: string;
+    /**
+     * @generated from field: string name = 3;
+     */
+    name: string;
+    /**
+     * The engine namespace this environment is (1:1).
+     *
+     * @generated from field: string namespace = 4;
+     */
+    namespace: string;
+    /**
+     * Destructive actions need the project admin role and an approval.
+     *
+     * @generated from field: bool protected = 5;
+     */
+    protected: boolean;
+};
+/**
+ * Describes the message loams.instance.v1.Environment.
+ * Use `create(EnvironmentSchema)` to create a new message.
+ */
+export declare const EnvironmentSchema: GenMessage<Environment>;
+/**
+ * @generated from message loams.instance.v1.DeviceRef
+ */
+export type DeviceRef = Message<"loams.instance.v1.DeviceRef"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+};
+/**
+ * Describes the message loams.instance.v1.DeviceRef.
+ * Use `create(DeviceRefSchema)` to create a new message.
+ */
+export declare const DeviceRefSchema: GenMessage<DeviceRef>;
+/**
+ * @generated from enum loams.instance.v1.Edition
+ */
+export declare enum Edition {
+    /**
+     * @generated from enum value: EDITION_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: EDITION_OSS = 1;
+     */
+    OSS = 1,
+    /**
+     * @generated from enum value: EDITION_CLOUD = 2;
+     */
+    CLOUD = 2,
+    /**
+     * @generated from enum value: EDITION_BYOC = 3;
+     */
+    BYOC = 3
+}
+/**
+ * Describes the enum loams.instance.v1.Edition.
+ */
+export declare const EditionSchema: GenEnum<Edition>;
+/**
+ * @generated from enum loams.instance.v1.SignInKind
+ */
+export declare enum SignInKind {
+    /**
+     * @generated from enum value: SIGN_IN_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * No sign-in: a loopback stack before the auth plan (D111).
+     *
+     * @generated from enum value: SIGN_IN_KIND_NONE = 1;
+     */
+    NONE = 1,
+    /**
+     * OIDC authorization code + PKCE at the instance's Authentik (§38).
+     *
+     * @generated from enum value: SIGN_IN_KIND_AUTHENTIK = 2;
+     */
+    AUTHENTIK = 2,
+    /**
+     * Authentik's device authorization flow (RFC 8628).
+     *
+     * @generated from enum value: SIGN_IN_KIND_AUTHENTIK_DEVICE_CODE = 3;
+     */
+    AUTHENTIK_DEVICE_CODE = 3,
+    /**
+     * A QR or typed pairing code from a signed-in session (§37 §7.2).
+     *
+     * @generated from enum value: SIGN_IN_KIND_PAIRING = 4;
+     */
+    PAIRING = 4
+}
+/**
+ * Describes the enum loams.instance.v1.SignInKind.
+ */
+export declare const SignInKindSchema: GenEnum<SignInKind>;
+/**
+ * @generated from enum loams.instance.v1.PrincipalKind
+ */
+export declare enum PrincipalKind {
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_USER = 1;
+     */
+    USER = 1,
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_SERVICE_ACCOUNT = 2;
+     */
+    SERVICE_ACCOUNT = 2,
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_AGENT = 3;
+     */
+    AGENT = 3
+}
+/**
+ * Describes the enum loams.instance.v1.PrincipalKind.
+ */
+export declare const PrincipalKindSchema: GenEnum<PrincipalKind>;
+/**
+ * @generated from service loams.instance.v1.InstanceService
+ */
+export declare const InstanceService: GenService<{
+    /**
+     * What this instance is and how to sign in to it. No auth.
+     *
+     * @generated from rpc loams.instance.v1.InstanceService.GetInstance
+     */
+    getInstance: {
+        methodKind: "unary";
+        input: typeof GetInstanceRequestSchema;
+        output: typeof GetInstanceResponseSchema;
+    };
+    /**
+     * The calling principal, its org, and the environments it can reach.
+     *
+     * @generated from rpc loams.instance.v1.InstanceService.WhoAmI
+     */
+    whoAmI: {
+        methodKind: "unary";
+        input: typeof WhoAmIRequestSchema;
+        output: typeof WhoAmIResponseSchema;
+    };
+}>;

package/dist/vendor/proto/gen/loams/instance/v1/instance_pb.js

@@ -0,0 +1,170 @@
+// Instance discovery and "who am I" for the Loams apps (design §37 §8.2,
+// AP0 Task 1).
+//
+// `GetInstance` needs no credentials: an app calls it first, before sign-in,
+// to learn what this instance is, which API packages it serves and where to
+// sign in. It mirrors the console's `GET /api/v1/instance` (§19 §3) and adds
+// what the desktop and phones need: the OAuth issuer and JWKS, the TLS pin
+// set for paired phones, push configuration and minimum app versions.
+//
+// Rules shared by every app-facing package (AP0 Rulings 2–6): unary and
+// server-streaming RPCs only; every RPC has its own request and response
+// message; idempotent reads are marked NO_SIDE_EFFECTS so Connect clients
+// may send them as HTTP GET; every mutation takes an `idempotency_key`;
+// errors carry a `loams.errors.v1.ErrorInfo` with a stable `reason`.
+import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import { file_loams_options_v1_options } from "../../options/v1/options_pb.js";
+/**
+ * Describes the file loams/instance/v1/instance.proto.
+ */
+export const file_loams_instance_v1_instance = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp, file_loams_options_v1_options]);
+/**
+ * Describes the message loams.instance.v1.GetInstanceRequest.
+ * Use `create(GetInstanceRequestSchema)` to create a new message.
+ */
+export const GetInstanceRequestSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 0);
+/**
+ * Describes the message loams.instance.v1.GetInstanceResponse.
+ * Use `create(GetInstanceResponseSchema)` to create a new message.
+ */
+export const GetInstanceResponseSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 1);
+/**
+ * Describes the message loams.instance.v1.ServiceStatus.
+ * Use `create(ServiceStatusSchema)` to create a new message.
+ */
+export const ServiceStatusSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 2);
+/**
+ * Describes the message loams.instance.v1.SignInMethod.
+ * Use `create(SignInMethodSchema)` to create a new message.
+ */
+export const SignInMethodSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 3);
+/**
+ * Describes the message loams.instance.v1.PushConfig.
+ * Use `create(PushConfigSchema)` to create a new message.
+ */
+export const PushConfigSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 4);
+/**
+ * Describes the message loams.instance.v1.WhoAmIRequest.
+ * Use `create(WhoAmIRequestSchema)` to create a new message.
+ */
+export const WhoAmIRequestSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 5);
+/**
+ * Describes the message loams.instance.v1.WhoAmIResponse.
+ * Use `create(WhoAmIResponseSchema)` to create a new message.
+ */
+export const WhoAmIResponseSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 6);
+/**
+ * Describes the message loams.instance.v1.Principal.
+ * Use `create(PrincipalSchema)` to create a new message.
+ */
+export const PrincipalSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 7);
+/**
+ * Describes the message loams.instance.v1.Org.
+ * Use `create(OrgSchema)` to create a new message.
+ */
+export const OrgSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 8);
+/**
+ * Describes the message loams.instance.v1.Environment.
+ * Use `create(EnvironmentSchema)` to create a new message.
+ */
+export const EnvironmentSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 9);
+/**
+ * Describes the message loams.instance.v1.DeviceRef.
+ * Use `create(DeviceRefSchema)` to create a new message.
+ */
+export const DeviceRefSchema = /*@__PURE__*/ messageDesc(file_loams_instance_v1_instance, 10);
+/**
+ * @generated from enum loams.instance.v1.Edition
+ */
+export var Edition;
+(function (Edition) {
+    /**
+     * @generated from enum value: EDITION_UNSPECIFIED = 0;
+     */
+    Edition[Edition["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * @generated from enum value: EDITION_OSS = 1;
+     */
+    Edition[Edition["OSS"] = 1] = "OSS";
+    /**
+     * @generated from enum value: EDITION_CLOUD = 2;
+     */
+    Edition[Edition["CLOUD"] = 2] = "CLOUD";
+    /**
+     * @generated from enum value: EDITION_BYOC = 3;
+     */
+    Edition[Edition["BYOC"] = 3] = "BYOC";
+})(Edition || (Edition = {}));
+/**
+ * Describes the enum loams.instance.v1.Edition.
+ */
+export const EditionSchema = /*@__PURE__*/ enumDesc(file_loams_instance_v1_instance, 0);
+/**
+ * @generated from enum loams.instance.v1.SignInKind
+ */
+export var SignInKind;
+(function (SignInKind) {
+    /**
+     * @generated from enum value: SIGN_IN_KIND_UNSPECIFIED = 0;
+     */
+    SignInKind[SignInKind["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * No sign-in: a loopback stack before the auth plan (D111).
+     *
+     * @generated from enum value: SIGN_IN_KIND_NONE = 1;
+     */
+    SignInKind[SignInKind["NONE"] = 1] = "NONE";
+    /**
+     * OIDC authorization code + PKCE at the instance's Authentik (§38).
+     *
+     * @generated from enum value: SIGN_IN_KIND_AUTHENTIK = 2;
+     */
+    SignInKind[SignInKind["AUTHENTIK"] = 2] = "AUTHENTIK";
+    /**
+     * Authentik's device authorization flow (RFC 8628).
+     *
+     * @generated from enum value: SIGN_IN_KIND_AUTHENTIK_DEVICE_CODE = 3;
+     */
+    SignInKind[SignInKind["AUTHENTIK_DEVICE_CODE"] = 3] = "AUTHENTIK_DEVICE_CODE";
+    /**
+     * A QR or typed pairing code from a signed-in session (§37 §7.2).
+     *
+     * @generated from enum value: SIGN_IN_KIND_PAIRING = 4;
+     */
+    SignInKind[SignInKind["PAIRING"] = 4] = "PAIRING";
+})(SignInKind || (SignInKind = {}));
+/**
+ * Describes the enum loams.instance.v1.SignInKind.
+ */
+export const SignInKindSchema = /*@__PURE__*/ enumDesc(file_loams_instance_v1_instance, 1);
+/**
+ * @generated from enum loams.instance.v1.PrincipalKind
+ */
+export var PrincipalKind;
+(function (PrincipalKind) {
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_UNSPECIFIED = 0;
+     */
+    PrincipalKind[PrincipalKind["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_USER = 1;
+     */
+    PrincipalKind[PrincipalKind["USER"] = 1] = "USER";
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_SERVICE_ACCOUNT = 2;
+     */
+    PrincipalKind[PrincipalKind["SERVICE_ACCOUNT"] = 2] = "SERVICE_ACCOUNT";
+    /**
+     * @generated from enum value: PRINCIPAL_KIND_AGENT = 3;
+     */
+    PrincipalKind[PrincipalKind["AGENT"] = 3] = "AGENT";
+})(PrincipalKind || (PrincipalKind = {}));
+/**
+ * Describes the enum loams.instance.v1.PrincipalKind.
+ */
+export const PrincipalKindSchema = /*@__PURE__*/ enumDesc(file_loams_instance_v1_instance, 2);
+/**
+ * @generated from service loams.instance.v1.InstanceService
+ */
+export const InstanceService = /*@__PURE__*/ serviceDesc(file_loams_instance_v1_instance, 0);