@polyester/sdk 0.0.0

package/dist/gen/auth/v1/subaccounts_pb.d.ts

@@ -0,0 +1,1490 @@
+import { ApiKey } from "./api_keys_pb.js";
+import { SubaccountPolicyView } from "./policies_pb.js";
+import { GetBalancesResponse } from "../../ledger/read/v1/ledger_read_pb.js";
+import { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import { FieldMask, Timestamp } from "@bufbuild/protobuf/wkt";
+import { Message } from "@bufbuild/protobuf";
+declare namespace subaccounts_pb_d_exports {
+  export { ActivityEntityKind, ActivityEntityKindSchema, ActivityEvent, ActivityEventAction, ActivityEventActionSchema, ActivityEventSchema, ActivityEventSource, ActivityEventSourceSchema, CreateSubaccountRequest, CreateSubaccountRequestSchema, CreateSubaccountResponse, CreateSubaccountResponseSchema, GetSubaccountRequest, GetSubaccountRequestSchema, GetSubaccountResponse, GetSubaccountResponseSchema, InviteSubaccountMemberRequest, InviteSubaccountMemberRequestSchema, InviteSubaccountMemberResponse, InviteSubaccountMemberResponseSchema, ListSubaccountEventsRequest, ListSubaccountEventsRequestSchema, ListSubaccountEventsResponse, ListSubaccountEventsResponseSchema, ListSubaccountInvitesRequest, ListSubaccountInvitesRequestSchema, ListSubaccountInvitesResponse, ListSubaccountInvitesResponseSchema, ListSubaccountMembersRequest, ListSubaccountMembersRequestSchema, ListSubaccountMembersResponse, ListSubaccountMembersResponseSchema, ListSubaccountsRequest, ListSubaccountsRequestSchema, ListSubaccountsResponse, ListSubaccountsResponseSchema, RemoveSubaccountMemberRequest, RemoveSubaccountMemberRequestSchema, RemoveSubaccountMemberResponse, RemoveSubaccountMemberResponseSchema, RespondSubaccountInviteRequest, RespondSubaccountInviteRequestSchema, RespondSubaccountInviteResponse, RespondSubaccountInviteResponseSchema, SetSubaccountMemberMFARequirementRequest, SetSubaccountMemberMFARequirementRequestSchema, SetSubaccountMemberMFARequirementResponse, SetSubaccountMemberMFARequirementResponseSchema, Subaccount, SubaccountInvite, SubaccountInviteAction, SubaccountInviteActionSchema, SubaccountInviteSchema, SubaccountInviteStatus, SubaccountInviteStatusSchema, SubaccountMemberView, SubaccountMemberViewSchema, SubaccountRole, SubaccountRoleSchema, SubaccountRoleView, SubaccountRoleViewSchema, SubaccountSchema, SubaccountService, SubaccountUpdateSpec, SubaccountUpdateSpecSchema, SubaccountViewService, UpdateSubaccountMemberRoleRequest, UpdateSubaccountMemberRoleRequestSchema, UpdateSubaccountMemberRoleResponse, UpdateSubaccountMemberRoleResponseSchema, UpdateSubaccountRequest, UpdateSubaccountRequestSchema, UpdateSubaccountResponse, UpdateSubaccountResponseSchema, file_auth_v1_subaccounts };
+}
+/**
+ * Describes the file auth/v1/subaccounts.proto.
+ */
+declare const file_auth_v1_subaccounts: GenFile;
+/**
+ * Role summary for one sub-account visible to the caller.
+ *
+ * @generated from message auth.v1.SubaccountRoleView
+ */
+type SubaccountRoleView = Message<"auth.v1.SubaccountRoleView"> & {
+  /**
+   * Sub-account identifier (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Effective role of the caller on this sub-account.
+   *
+   * @generated from field: auth.v1.SubaccountRole role = 2;
+   */
+  role: SubaccountRole;
+};
+/**
+ * Describes the message auth.v1.SubaccountRoleView.
+ * Use `create(SubaccountRoleViewSchema)` to create a new message.
+ */
+declare const SubaccountRoleViewSchema: GenMessage<SubaccountRoleView>;
+/**
+ * Sub-account summary visible to the caller.
+ *
+ * @generated from message auth.v1.Subaccount
+ */
+type Subaccount = Message<"auth.v1.Subaccount"> & {
+  /**
+   * Sub-account identifier (opaque ID).
+   *
+   * @generated from field: fixed64 id = 1;
+   */
+  id: bigint;
+  /**
+   * Role of the current caller on this sub-account.
+   *
+   * @generated from field: auth.v1.SubaccountRole role = 2;
+   */
+  role: SubaccountRole;
+  /**
+   * Optional human-readable label for this sub-account.
+   *
+   * @generated from field: string label = 3;
+   */
+  label: string;
+  /**
+   * Optional user-chosen icon/emoji for UI display.
+   *
+   * @generated from field: string icon = 10;
+   */
+  icon: string;
+  /**
+   * Optional user-chosen color token for UI display. Tokens use lowercase letters, numbers, underscores, or hyphens.
+   *
+   * @generated from field: string color = 11;
+   */
+  color: string;
+  /**
+   * Current status of the sub-account, such as "active" or "disabled".
+   *
+   * @generated from field: string status = 4;
+   */
+  status: string;
+  /**
+   * Smart Account EVM address backing this sub-account.
+   *
+   * @generated from field: string smart_account_address = 5;
+   */
+  smartAccountAddress: string;
+  /**
+   * Owner (root account) public username, if set. Useful for shared views.
+   *
+   * @generated from field: string owner_username = 6;
+   */
+  ownerUsername: string;
+  /**
+   * Owner (root account) avatar URL, if set.
+   *
+   * @generated from field: string owner_avatar_url = 7;
+   */
+  ownerAvatarUrl: string;
+  /**
+   * Owner (root account) primary Smart Account address, when available. Allows
+   * clients to display a stable identity even when no username is set.
+   *
+   * @generated from field: string owner_root_smart_account_address = 8;
+   */
+  ownerRootSmartAccountAddress: string;
+  /**
+   * Optional sub-account policy identifier (opaque ID). 0 means no
+   * explicit policy attached.
+   *
+   * @generated from field: fixed64 subaccount_policy_id = 9;
+   */
+  subaccountPolicyId: bigint;
+  /**
+   * Owner-controlled security baseline for delegated interactive members on
+   * protected sub-account actions. This does not apply to read-only real-time
+   * subscriptions.
+   *
+   * @generated from field: bool require_member_mfa = 12;
+   */
+  requireMemberMfa: boolean;
+  /**
+   * Smart-account derivation salt nonce assigned when this sub-account was
+   * created. Present only when the caller owns the sub-account and can use it
+   * for direct chain signing.
+   *
+   * @generated from field: optional uint32 smart_account_salt_nonce = 13;
+   */
+  smartAccountSaltNonce?: number | undefined;
+  /**
+   * Time in UTC when this sub-account's configuration was last changed. For the
+   * same sub-account, later is fresher, equal is an idempotent replay, and
+   * earlier is stale. Equal timestamps with different configuration indicate
+   * an invariant failure.
+   *
+   * @generated from field: google.protobuf.Timestamp updated_at = 14;
+   */
+  updatedAt?: Timestamp | undefined;
+  /**
+   * Monotonic resource revision used for conditional updates.
+   *
+   * @generated from field: uint64 revision = 15;
+   */
+  revision: bigint;
+};
+/**
+ * Describes the message auth.v1.Subaccount.
+ * Use `create(SubaccountSchema)` to create a new message.
+ */
+declare const SubaccountSchema: GenMessage<Subaccount>;
+/**
+ * Request to list sub-accounts owned by or shared with the caller.
+ *
+ * @generated from message auth.v1.ListSubaccountsRequest
+ */
+type ListSubaccountsRequest = Message<"auth.v1.ListSubaccountsRequest"> & {};
+/**
+ * Describes the message auth.v1.ListSubaccountsRequest.
+ * Use `create(ListSubaccountsRequestSchema)` to create a new message.
+ */
+declare const ListSubaccountsRequestSchema: GenMessage<ListSubaccountsRequest>;
+/**
+ * Response containing sub-accounts visible to the caller.
+ *
+ * @generated from message auth.v1.ListSubaccountsResponse
+ */
+type ListSubaccountsResponse = Message<"auth.v1.ListSubaccountsResponse"> & {
+  /**
+   * Sub-accounts owned by or shared with the caller, ordered by sub-account ID ascending.
+   *
+   * @generated from field: repeated auth.v1.Subaccount subaccounts = 1;
+   */
+  subaccounts: Subaccount[];
+  /**
+   * Total number of sub-accounts that have ever been created for this root,
+   * including soft-deleted ones. Clients use total_created + 1 only for the
+   * next new Smart Account; existing sub-accounts expose their assigned salt
+   * nonce on Subaccount when direct signing is available.
+   *
+   * @generated from field: uint32 total_created = 2;
+   */
+  totalCreated: number;
+};
+/**
+ * Describes the message auth.v1.ListSubaccountsResponse.
+ * Use `create(ListSubaccountsResponseSchema)` to create a new message.
+ */
+declare const ListSubaccountsResponseSchema: GenMessage<ListSubaccountsResponse>;
+/**
+ * Request to create a new sub-account under the caller's root account.
+ *
+ * @generated from message auth.v1.CreateSubaccountRequest
+ */
+type CreateSubaccountRequest = Message<"auth.v1.CreateSubaccountRequest"> & {
+  /**
+   * Optional human label for display in UI.
+   *
+   * @generated from field: string label = 1;
+   */
+  label: string;
+  /**
+   * Optional user-chosen icon/emoji for UI display.
+   *
+   * @generated from field: string icon = 7;
+   */
+  icon: string;
+  /**
+   * Optional user-chosen color token for UI display. Tokens use lowercase letters, numbers, underscores, or hyphens.
+   *
+   * @generated from field: string color = 8;
+   */
+  color: string;
+  /**
+   * Smart Account EVM address for the new sub-account.
+   *
+   * @generated from field: string smart_account_address = 2;
+   */
+  smartAccountAddress: string;
+  /**
+   * Auth challenge nonce returned by GetNonce for this smart account. This is
+   * not the smart-account derivation salt nonce.
+   *
+   * @generated from field: string nonce = 3;
+   */
+  nonce: string;
+  /**
+   * Signature over the canonical login message containing the nonce.
+   *
+   * @generated from field: string signature = 4;
+   */
+  signature: string;
+  /**
+   * Optional primary wallet address supplied by the client. Sub-account ownership is proven by the Smart Account signature.
+   *
+   * @generated from field: optional string primary_wallet_address = 5;
+   */
+  primaryWalletAddress?: string | undefined;
+  /**
+   * Optional provider hint supplied by the client. Sub-account creation does not depend on this value.
+   *
+   * @generated from field: string wallet_provider = 6;
+   */
+  walletProvider: string;
+};
+/**
+ * Describes the message auth.v1.CreateSubaccountRequest.
+ * Use `create(CreateSubaccountRequestSchema)` to create a new message.
+ */
+declare const CreateSubaccountRequestSchema: GenMessage<CreateSubaccountRequest>;
+/**
+ * Response returned after creating a sub-account.
+ *
+ * @generated from message auth.v1.CreateSubaccountResponse
+ */
+type CreateSubaccountResponse = Message<"auth.v1.CreateSubaccountResponse"> & {
+  /**
+   * Identifier for the created sub-account (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Total number of sub-accounts that have ever been created for this root,
+   * including soft-deleted ones. Returned here so clients can immediately
+   * derive the next salt/index without requiring a fresh ListSubaccounts call.
+   *
+   * @generated from field: uint32 total_created = 2;
+   */
+  totalCreated: number;
+  /**
+   * Smart-account derivation salt nonce assigned to the created sub-account.
+   * Today this equals total_created for a successful create.
+   *
+   * @generated from field: uint32 smart_account_salt_nonce = 3;
+   */
+  smartAccountSaltNonce: number;
+  /**
+   * Initial monotonic resource revision. Clients can pass this value directly
+   * as expected_revision on the next revision-gated mutation.
+   *
+   * @generated from field: uint64 revision = 4;
+   */
+  revision: bigint;
+};
+/**
+ * Describes the message auth.v1.CreateSubaccountResponse.
+ * Use `create(CreateSubaccountResponseSchema)` to create a new message.
+ */
+declare const CreateSubaccountResponseSchema: GenMessage<CreateSubaccountResponse>;
+/**
+ * SubaccountUpdateSpec contains mutable display and status configuration.
+ *
+ * @generated from message auth.v1.SubaccountUpdateSpec
+ */
+type SubaccountUpdateSpec = Message<"auth.v1.SubaccountUpdateSpec"> & {
+  /**
+   * Label for the sub-account. Empty clears the label when selected.
+   *
+   * @generated from field: string label = 1;
+   */
+  label: string;
+  /**
+   * User-chosen icon/emoji for UI display. Empty clears the icon when selected.
+   *
+   * @generated from field: string icon = 2;
+   */
+  icon: string;
+  /**
+   * User-chosen color token for UI display. Empty clears the color when selected.
+   *
+   * @generated from field: string color = 3;
+   */
+  color: string;
+  /**
+   * Status for the sub-account, such as "active" or "disabled".
+   *
+   * @generated from field: string status = 4;
+   */
+  status: string;
+};
+/**
+ * Describes the message auth.v1.SubaccountUpdateSpec.
+ * Use `create(SubaccountUpdateSpecSchema)` to create a new message.
+ */
+declare const SubaccountUpdateSpecSchema: GenMessage<SubaccountUpdateSpec>;
+/**
+ * Request to change selected mutable fields for a sub-account.
+ *
+ * @generated from message auth.v1.UpdateSubaccountRequest
+ */
+type UpdateSubaccountRequest = Message<"auth.v1.UpdateSubaccountRequest"> & {
+  /**
+   * Sub-account to update (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Candidate values for fields selected by update_mask.
+   *
+   * @generated from field: auth.v1.SubaccountUpdateSpec subaccount = 2;
+   */
+  subaccount?: SubaccountUpdateSpec | undefined;
+  /**
+   * Mutable fields to apply. Paths are relative to subaccount. The mask is
+   * required, must be non-empty, and cannot contain "*".
+   *
+   * @generated from field: google.protobuf.FieldMask update_mask = 3;
+   */
+  updateMask?: FieldMask | undefined;
+  /**
+   * Revision returned by the latest successful read.
+   *
+   * @generated from field: uint64 expected_revision = 4;
+   */
+  expectedRevision: bigint;
+};
+/**
+ * Describes the message auth.v1.UpdateSubaccountRequest.
+ * Use `create(UpdateSubaccountRequestSchema)` to create a new message.
+ */
+declare const UpdateSubaccountRequestSchema: GenMessage<UpdateSubaccountRequest>;
+/**
+ * Response returned after updating a sub-account.
+ *
+ * @generated from message auth.v1.UpdateSubaccountResponse
+ */
+type UpdateSubaccountResponse = Message<"auth.v1.UpdateSubaccountResponse"> & {
+  /**
+   * Sub-account after applying the update.
+   *
+   * @generated from field: auth.v1.Subaccount subaccount = 1;
+   */
+  subaccount?: Subaccount | undefined;
+};
+/**
+ * Describes the message auth.v1.UpdateSubaccountResponse.
+ * Use `create(UpdateSubaccountResponseSchema)` to create a new message.
+ */
+declare const UpdateSubaccountResponseSchema: GenMessage<UpdateSubaccountResponse>;
+/**
+ * Request to update the delegated-member MFA requirement for a sub-account.
+ *
+ * @generated from message auth.v1.SetSubaccountMemberMFARequirementRequest
+ */
+type SetSubaccountMemberMFARequirementRequest = Message<"auth.v1.SetSubaccountMemberMFARequirementRequest"> & {
+  /**
+   * Sub-account whose delegated-member MFA requirement should be updated (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * When true, delegated interactive members must satisfy MFA requirements for
+   * protected sub-account actions. This does not apply to read-only real-time
+   * subscriptions.
+   *
+   * @generated from field: bool require_member_mfa = 2;
+   */
+  requireMemberMfa: boolean;
+};
+/**
+ * Describes the message auth.v1.SetSubaccountMemberMFARequirementRequest.
+ * Use `create(SetSubaccountMemberMFARequirementRequestSchema)` to create a new message.
+ */
+declare const SetSubaccountMemberMFARequirementRequestSchema: GenMessage<SetSubaccountMemberMFARequirementRequest>;
+/**
+ * Empty response returned after updating the delegated-member MFA requirement.
+ *
+ * @generated from message auth.v1.SetSubaccountMemberMFARequirementResponse
+ */
+type SetSubaccountMemberMFARequirementResponse = Message<"auth.v1.SetSubaccountMemberMFARequirementResponse"> & {};
+/**
+ * Describes the message auth.v1.SetSubaccountMemberMFARequirementResponse.
+ * Use `create(SetSubaccountMemberMFARequirementResponseSchema)` to create a new message.
+ */
+declare const SetSubaccountMemberMFARequirementResponseSchema: GenMessage<SetSubaccountMemberMFARequirementResponse>;
+/**
+ * Member summary for a root account with access to a sub-account.
+ *
+ * @generated from message auth.v1.SubaccountMemberView
+ */
+type SubaccountMemberView = Message<"auth.v1.SubaccountMemberView"> & {
+  /**
+   * Identifier for the member's root account (opaque ID).
+   *
+   * @generated from field: fixed64 account_id = 1;
+   */
+  accountId: bigint;
+  /**
+   * Effective role on this sub-account.
+   *
+   * @generated from field: auth.v1.SubaccountRole role = 2;
+   */
+  role: SubaccountRole;
+  /**
+   * Optional username for the member's root account.
+   *
+   * @generated from field: string username = 3;
+   */
+  username: string;
+  /**
+   * Smart Account address for the member's root account, if any.
+   *
+   * @generated from field: string smart_account_address = 4;
+   */
+  smartAccountAddress: string;
+  /**
+   * Optional avatar URL for the member's root account.
+   *
+   * @generated from field: string avatar_url = 5;
+   */
+  avatarUrl: string;
+  /**
+   * True when the member has at least one MFA factor enrolled on their root account.
+   *
+   * @generated from field: bool mfa_enrolled = 6;
+   */
+  mfaEnrolled: boolean;
+};
+/**
+ * Describes the message auth.v1.SubaccountMemberView.
+ * Use `create(SubaccountMemberViewSchema)` to create a new message.
+ */
+declare const SubaccountMemberViewSchema: GenMessage<SubaccountMemberView>;
+/**
+ * Request to list members for a sub-account.
+ *
+ * @generated from message auth.v1.ListSubaccountMembersRequest
+ */
+type ListSubaccountMembersRequest = Message<"auth.v1.ListSubaccountMembersRequest"> & {
+  /**
+   * Sub-account to inspect (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+};
+/**
+ * Describes the message auth.v1.ListSubaccountMembersRequest.
+ * Use `create(ListSubaccountMembersRequestSchema)` to create a new message.
+ */
+declare const ListSubaccountMembersRequestSchema: GenMessage<ListSubaccountMembersRequest>;
+/**
+ * Response containing the members of a sub-account.
+ *
+ * @generated from message auth.v1.ListSubaccountMembersResponse
+ */
+type ListSubaccountMembersResponse = Message<"auth.v1.ListSubaccountMembersResponse"> & {
+  /**
+   * Members for the sub-account. The owner is first, followed by delegated members oldest first.
+   *
+   * @generated from field: repeated auth.v1.SubaccountMemberView members = 1;
+   */
+  members: SubaccountMemberView[];
+};
+/**
+ * Describes the message auth.v1.ListSubaccountMembersResponse.
+ * Use `create(ListSubaccountMembersResponseSchema)` to create a new message.
+ */
+declare const ListSubaccountMembersResponseSchema: GenMessage<ListSubaccountMembersResponse>;
+/**
+ * Request to remove a delegated member from a sub-account.
+ *
+ * @generated from message auth.v1.RemoveSubaccountMemberRequest
+ */
+type RemoveSubaccountMemberRequest = Message<"auth.v1.RemoveSubaccountMemberRequest"> & {
+  /**
+   * Sub-account to modify (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Root account ID of the member to revoke (opaque ID).
+   *
+   * @generated from field: fixed64 grantee_account_id = 2;
+   */
+  granteeAccountId: bigint;
+};
+/**
+ * Describes the message auth.v1.RemoveSubaccountMemberRequest.
+ * Use `create(RemoveSubaccountMemberRequestSchema)` to create a new message.
+ */
+declare const RemoveSubaccountMemberRequestSchema: GenMessage<RemoveSubaccountMemberRequest>;
+/**
+ * Empty response returned after removing a sub-account member.
+ *
+ * @generated from message auth.v1.RemoveSubaccountMemberResponse
+ */
+type RemoveSubaccountMemberResponse = Message<"auth.v1.RemoveSubaccountMemberResponse"> & {};
+/**
+ * Describes the message auth.v1.RemoveSubaccountMemberResponse.
+ * Use `create(RemoveSubaccountMemberResponseSchema)` to create a new message.
+ */
+declare const RemoveSubaccountMemberResponseSchema: GenMessage<RemoveSubaccountMemberResponse>;
+/**
+ * Request to change the role of an existing sub-account member without sending a new invitation.
+ *
+ * @generated from message auth.v1.UpdateSubaccountMemberRoleRequest
+ */
+type UpdateSubaccountMemberRoleRequest = Message<"auth.v1.UpdateSubaccountMemberRoleRequest"> & {
+  /**
+   * Sub-account to modify (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Root account ID of the member whose role should be updated (opaque ID).
+   *
+   * @generated from field: fixed64 grantee_account_id = 2;
+   */
+  granteeAccountId: bigint;
+  /**
+   * New role to assign.
+   *
+   * @generated from field: auth.v1.SubaccountRole role = 3;
+   */
+  role: SubaccountRole;
+};
+/**
+ * Describes the message auth.v1.UpdateSubaccountMemberRoleRequest.
+ * Use `create(UpdateSubaccountMemberRoleRequestSchema)` to create a new message.
+ */
+declare const UpdateSubaccountMemberRoleRequestSchema: GenMessage<UpdateSubaccountMemberRoleRequest>;
+/**
+ * Empty response returned after updating a member role.
+ *
+ * @generated from message auth.v1.UpdateSubaccountMemberRoleResponse
+ */
+type UpdateSubaccountMemberRoleResponse = Message<"auth.v1.UpdateSubaccountMemberRoleResponse"> & {};
+/**
+ * Describes the message auth.v1.UpdateSubaccountMemberRoleResponse.
+ * Use `create(UpdateSubaccountMemberRoleResponseSchema)` to create a new message.
+ */
+declare const UpdateSubaccountMemberRoleResponseSchema: GenMessage<UpdateSubaccountMemberRoleResponse>;
+/**
+ * View of a pending or historical invitation to a sub-account.
+ *
+ * @generated from message auth.v1.SubaccountInvite
+ */
+type SubaccountInvite = Message<"auth.v1.SubaccountInvite"> & {
+  /**
+   * Invite identifier (opaque ID).
+   *
+   * @generated from field: fixed64 id = 1;
+   */
+  id: bigint;
+  /**
+   * Target sub-account (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 2;
+   */
+  subaccountId: bigint;
+  /**
+   * Grantee root account ID the invite is for (opaque ID).
+   *
+   * @generated from field: fixed64 grantee_account_id = 3;
+   */
+  granteeAccountId: bigint;
+  /**
+   * Inviter root account ID (opaque ID).
+   *
+   * @generated from field: fixed64 inviter_account_id = 4;
+   */
+  inviterAccountId: bigint;
+  /**
+   * Requested role for the grantee.
+   *
+   * @generated from field: auth.v1.SubaccountRole role = 5;
+   */
+  role: SubaccountRole;
+  /**
+   * Current invitation status.
+   *
+   * @generated from field: auth.v1.SubaccountInviteStatus status = 6;
+   */
+  status: SubaccountInviteStatus;
+  /**
+   * Time when the invitation was created.
+   *
+   * @generated from field: google.protobuf.Timestamp created_at = 7;
+   */
+  createdAt?: Timestamp | undefined;
+  /**
+   * Time when the invitation was accepted, declined, or cancelled. Empty while pending.
+   *
+   * @generated from field: google.protobuf.Timestamp responded_at = 8;
+   */
+  respondedAt?: Timestamp | undefined;
+  /**
+   * Optional usernames for better UX in invite lists.
+   *
+   * @generated from field: string grantee_username = 9;
+   */
+  granteeUsername: string;
+  /**
+   * Username of the account that sent the invitation, when available.
+   *
+   * @generated from field: string inviter_username = 10;
+   */
+  inviterUsername: string;
+  /**
+   * Optional label for the target sub-account, for display in invite lists.
+   *
+   * @generated from field: string subaccount_label = 11;
+   */
+  subaccountLabel: string;
+  /**
+   * Inviter (root account) primary Smart Account address, when available.
+   * Useful for displaying a stable identity when no username is set.
+   *
+   * @generated from field: string inviter_root_smart_account_address = 12;
+   */
+  inviterRootSmartAccountAddress: string;
+  /**
+   * Grantee (root account) primary Smart Account address, when available.
+   * Useful for displaying a stable identity when no username is set.
+   *
+   * @generated from field: string grantee_root_smart_account_address = 13;
+   */
+  granteeRootSmartAccountAddress: string;
+  /**
+   * Current delegated-member MFA requirement on the target sub-account. If true, accepting the invite requires MFA enrollment and fresh step-up.
+   *
+   * @generated from field: bool require_member_mfa = 14;
+   */
+  requireMemberMfa: boolean;
+};
+/**
+ * Describes the message auth.v1.SubaccountInvite.
+ * Use `create(SubaccountInviteSchema)` to create a new message.
+ */
+declare const SubaccountInviteSchema: GenMessage<SubaccountInvite>;
+/**
+ * Request to invite another root account to a sub-account.
+ *
+ * @generated from message auth.v1.InviteSubaccountMemberRequest
+ */
+type InviteSubaccountMemberRequest = Message<"auth.v1.InviteSubaccountMemberRequest"> & {
+  /**
+   * Sub-account to share (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Root account ID of the grantee (opaque ID).
+   *
+   * @generated from field: fixed64 grantee_account_id = 2;
+   */
+  granteeAccountId: bigint;
+  /**
+   * Role to grant if the invite is accepted.
+   *
+   * @generated from field: auth.v1.SubaccountRole role = 3;
+   */
+  role: SubaccountRole;
+};
+/**
+ * Describes the message auth.v1.InviteSubaccountMemberRequest.
+ * Use `create(InviteSubaccountMemberRequestSchema)` to create a new message.
+ */
+declare const InviteSubaccountMemberRequestSchema: GenMessage<InviteSubaccountMemberRequest>;
+/**
+ * Response containing the created or refreshed invitation.
+ *
+ * @generated from message auth.v1.InviteSubaccountMemberResponse
+ */
+type InviteSubaccountMemberResponse = Message<"auth.v1.InviteSubaccountMemberResponse"> & {
+  /**
+   * Pending invitation.
+   *
+   * @generated from field: auth.v1.SubaccountInvite invite = 1;
+   */
+  invite?: SubaccountInvite | undefined;
+};
+/**
+ * Describes the message auth.v1.InviteSubaccountMemberResponse.
+ * Use `create(InviteSubaccountMemberResponseSchema)` to create a new message.
+ */
+declare const InviteSubaccountMemberResponseSchema: GenMessage<InviteSubaccountMemberResponse>;
+/**
+ * Request to list sub-account invitations.
+ *
+ * @generated from message auth.v1.ListSubaccountInvitesRequest
+ */
+type ListSubaccountInvitesRequest = Message<"auth.v1.ListSubaccountInvitesRequest"> & {
+  /**
+   * Optional direction filter. Use "incoming" for invites where the caller is grantee, "outgoing" for invites sent by the caller, or empty for both.
+   *
+   * @generated from field: string direction = 1;
+   */
+  direction: string;
+};
+/**
+ * Describes the message auth.v1.ListSubaccountInvitesRequest.
+ * Use `create(ListSubaccountInvitesRequestSchema)` to create a new message.
+ */
+declare const ListSubaccountInvitesRequestSchema: GenMessage<ListSubaccountInvitesRequest>;
+/**
+ * Response containing sub-account invitations.
+ *
+ * @generated from message auth.v1.ListSubaccountInvitesResponse
+ */
+type ListSubaccountInvitesResponse = Message<"auth.v1.ListSubaccountInvitesResponse"> & {
+  /**
+   * Invitations for the caller, ordered newest first.
+   *
+   * @generated from field: repeated auth.v1.SubaccountInvite invites = 1;
+   */
+  invites: SubaccountInvite[];
+};
+/**
+ * Describes the message auth.v1.ListSubaccountInvitesResponse.
+ * Use `create(ListSubaccountInvitesResponseSchema)` to create a new message.
+ */
+declare const ListSubaccountInvitesResponseSchema: GenMessage<ListSubaccountInvitesResponse>;
+/**
+ * Request to accept, decline, or cancel an invitation.
+ *
+ * @generated from message auth.v1.RespondSubaccountInviteRequest
+ */
+type RespondSubaccountInviteRequest = Message<"auth.v1.RespondSubaccountInviteRequest"> & {
+  /**
+   * Invite identifier (opaque ID).
+   *
+   * @generated from field: fixed64 invite_id = 1;
+   */
+  inviteId: bigint;
+  /**
+   * Action to apply to the invitation.
+   *
+   * @generated from field: auth.v1.SubaccountInviteAction action = 2;
+   */
+  action: SubaccountInviteAction;
+};
+/**
+ * Describes the message auth.v1.RespondSubaccountInviteRequest.
+ * Use `create(RespondSubaccountInviteRequestSchema)` to create a new message.
+ */
+declare const RespondSubaccountInviteRequestSchema: GenMessage<RespondSubaccountInviteRequest>;
+/**
+ * Response containing the updated invitation.
+ *
+ * @generated from message auth.v1.RespondSubaccountInviteResponse
+ */
+type RespondSubaccountInviteResponse = Message<"auth.v1.RespondSubaccountInviteResponse"> & {
+  /**
+   * Invitation after applying the response action.
+   *
+   * @generated from field: auth.v1.SubaccountInvite invite = 1;
+   */
+  invite?: SubaccountInvite | undefined;
+};
+/**
+ * Describes the message auth.v1.RespondSubaccountInviteResponse.
+ * Use `create(RespondSubaccountInviteResponseSchema)` to create a new message.
+ */
+declare const RespondSubaccountInviteResponseSchema: GenMessage<RespondSubaccountInviteResponse>;
+/**
+ * Request for an aggregated sub-account read view.
+ *
+ * @generated from message auth.v1.GetSubaccountRequest
+ */
+type GetSubaccountRequest = Message<"auth.v1.GetSubaccountRequest"> & {
+  /**
+   * Target sub-account (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Include API keys scoped to this sub-account.
+   *
+   * @generated from field: bool include_api_keys = 2;
+   */
+  includeApiKeys: boolean;
+  /**
+   * Include members for this sub-account. Only owner and admin callers receive members.
+   *
+   * @generated from field: bool include_members = 3;
+   */
+  includeMembers: boolean;
+  /**
+   * Include invitations for the caller.
+   *
+   * @generated from field: bool include_invites = 4;
+   */
+  includeInvites: boolean;
+  /**
+   * Include the attached sub-account policy, when one is attached.
+   *
+   * @generated from field: bool include_policy = 5;
+   */
+  includePolicy: boolean;
+  /**
+   * Include current balances for this sub-account.
+   *
+   * @generated from field: bool include_balances = 6;
+   */
+  includeBalances: boolean;
+  /**
+   * Optional invitation direction filter. Use "incoming", "outgoing", or empty for both.
+   *
+   * @generated from field: string invites_direction = 7;
+   */
+  invitesDirection: string;
+};
+/**
+ * Describes the message auth.v1.GetSubaccountRequest.
+ * Use `create(GetSubaccountRequestSchema)` to create a new message.
+ */
+declare const GetSubaccountRequestSchema: GenMessage<GetSubaccountRequest>;
+/**
+ * Aggregated sub-account read view.
+ *
+ * @generated from message auth.v1.GetSubaccountResponse
+ */
+type GetSubaccountResponse = Message<"auth.v1.GetSubaccountResponse"> & {
+  /**
+   * Requested sub-account summary.
+   *
+   * @generated from field: auth.v1.Subaccount subaccount = 1;
+   */
+  subaccount?: Subaccount | undefined;
+  /**
+   * API keys scoped to this sub-account when include_api_keys is true.
+   *
+   * @generated from field: repeated auth.v1.ApiKey api_keys = 2;
+   */
+  apiKeys: ApiKey[];
+  /**
+   * Members for this sub-account when include_members is true and the caller is owner or admin.
+   *
+   * @generated from field: repeated auth.v1.SubaccountMemberView members = 3;
+   */
+  members: SubaccountMemberView[];
+  /**
+   * Invitations for the caller when include_invites is true.
+   *
+   * @generated from field: repeated auth.v1.SubaccountInvite invites = 4;
+   */
+  invites: SubaccountInvite[];
+  /**
+   * Attached policy when include_policy is true and the sub-account has a policy.
+   *
+   * @generated from field: auth.v1.SubaccountPolicyView policy = 5;
+   */
+  policy?: SubaccountPolicyView | undefined;
+  /**
+   * Current balances when include_balances is true.
+   *
+   * @generated from field: ledger.read.v1.GetBalancesResponse balances = 6;
+   */
+  balances?: GetBalancesResponse | undefined;
+};
+/**
+ * Describes the message auth.v1.GetSubaccountResponse.
+ * Use `create(GetSubaccountResponseSchema)` to create a new message.
+ */
+declare const GetSubaccountResponseSchema: GenMessage<GetSubaccountResponse>;
+/**
+ * Activity or audit event for a sub-account.
+ *
+ * @generated from message auth.v1.ActivityEvent
+ */
+type ActivityEvent = Message<"auth.v1.ActivityEvent"> & {
+  /**
+   * Time when the event occurred.
+   *
+   * @generated from field: google.protobuf.Timestamp created_at = 2;
+   */
+  createdAt?: Timestamp | undefined;
+  /**
+   * Category of entity affected by the event.
+   *
+   * @generated from field: auth.v1.ActivityEntityKind entity_kind = 3;
+   */
+  entityKind: ActivityEntityKind;
+  /**
+   * Action recorded for the entity.
+   *
+   * @generated from field: auth.v1.ActivityEventAction event_action = 4;
+   */
+  eventAction: ActivityEventAction;
+  /**
+   * Client channel from which the event originated.
+   *
+   * @generated from field: auth.v1.ActivityEventSource source = 5;
+   */
+  source: ActivityEventSource;
+  /**
+   * Origin IP address. Masked for non-owner and non-admin callers.
+   *
+   * @generated from field: string ip = 6;
+   */
+  ip: string;
+  /**
+   * User agent associated with the event, when available.
+   *
+   * @generated from field: string user_agent = 7;
+   */
+  userAgent: string;
+  /**
+   * Account that performed the action (opaque ID).
+   *
+   * @generated from field: fixed64 actor_account_id = 8;
+   */
+  actorAccountId: bigint;
+  /**
+   * Structured event details as a JSON string. Maximum 64 KiB.
+   *
+   * @generated from field: string payload_json = 9;
+   */
+  payloadJson: string;
+};
+/**
+ * Describes the message auth.v1.ActivityEvent.
+ * Use `create(ActivityEventSchema)` to create a new message.
+ */
+declare const ActivityEventSchema: GenMessage<ActivityEvent>;
+/**
+ * Request to list sub-account activity.
+ *
+ * @generated from message auth.v1.ListSubaccountEventsRequest
+ */
+type ListSubaccountEventsRequest = Message<"auth.v1.ListSubaccountEventsRequest"> & {
+  /**
+   * Target sub-account (opaque ID).
+   *
+   * @generated from field: fixed64 subaccount_id = 1;
+   */
+  subaccountId: bigint;
+  /**
+   * Maximum number of events to return. Defaults to 50 when omitted; maximum is
+   * 200.
+   *
+   * @generated from field: uint32 limit = 2;
+   */
+  limit: number;
+  /**
+   * Opaque keyset cursor from a previous response. The cursor is exclusive and
+   * bound to the authenticated account and requested sub-account.
+   *
+   * @generated from field: string page_token = 4;
+   */
+  pageToken: string;
+};
+/**
+ * Describes the message auth.v1.ListSubaccountEventsRequest.
+ * Use `create(ListSubaccountEventsRequestSchema)` to create a new message.
+ */
+declare const ListSubaccountEventsRequestSchema: GenMessage<ListSubaccountEventsRequest>;
+/**
+ * Response containing sub-account activity events.
+ *
+ * @generated from message auth.v1.ListSubaccountEventsResponse
+ */
+type ListSubaccountEventsResponse = Message<"auth.v1.ListSubaccountEventsResponse"> & {
+  /**
+   * Activity events ordered newest first.
+   *
+   * @generated from field: repeated auth.v1.ActivityEvent events = 1;
+   */
+  events: ActivityEvent[];
+  /**
+   * Opaque cursor for the next page. Empty when no more results exist.
+   *
+   * @generated from field: string next_page_token = 3;
+   */
+  nextPageToken: string;
+};
+/**
+ * Describes the message auth.v1.ListSubaccountEventsResponse.
+ * Use `create(ListSubaccountEventsResponseSchema)` to create a new message.
+ */
+declare const ListSubaccountEventsResponseSchema: GenMessage<ListSubaccountEventsResponse>;
+/**
+ * Role granted to a root account on a sub-account.
+ *
+ * @generated from enum auth.v1.SubaccountRole
+ */
+declare enum SubaccountRole {
+  /**
+   * No sub-account role was specified.
+   *
+   * @generated from enum value: SUBACCOUNT_ROLE_UNSPECIFIED = 0;
+   */
+  SUBACCOUNT_ROLE_UNSPECIFIED = 0,
+  /**
+   * Can view permitted sub-account data.
+   *
+   * @generated from enum value: VIEWER = 1;
+   */
+  VIEWER = 1,
+  /**
+   * Can place and manage spot orders where policy allows.
+   *
+   * @generated from enum value: TRADER = 2;
+   */
+  TRADER = 2,
+  /**
+   * Can place and manage spot and leverage-enabled orders where policy allows.
+   *
+   * @generated from enum value: LEVERAGED_TRADER = 3;
+   */
+  LEVERAGED_TRADER = 3,
+  /**
+   * Can manage permitted funding and treasury actions where policy allows.
+   *
+   * @generated from enum value: TREASURY = 4;
+   */
+  TREASURY = 4,
+  /**
+   * Can administer delegated members and settings, except owner-only controls.
+   *
+   * @generated from enum value: ADMIN = 5;
+   */
+  ADMIN = 5,
+  /**
+   * Owns the sub-account and can administer all sub-account settings.
+   *
+   * @generated from enum value: OWNER = 6;
+   */
+  OWNER = 6
+}
+/**
+ * Describes the enum auth.v1.SubaccountRole.
+ */
+declare const SubaccountRoleSchema: GenEnum<SubaccountRole>;
+/**
+ * Status of an invitation to join a sub-account.
+ *
+ * @generated from enum auth.v1.SubaccountInviteStatus
+ */
+declare enum SubaccountInviteStatus {
+  /**
+   * No invitation status was specified.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * Invitation is waiting for the grantee to respond.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_PENDING = 1;
+   */
+  PENDING = 1,
+  /**
+   * Invitation was accepted and access was granted.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_ACCEPTED = 2;
+   */
+  ACCEPTED = 2,
+  /**
+   * Invitation was declined by the grantee.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_DECLINED = 3;
+   */
+  DECLINED = 3,
+  /**
+   * Invitation was cancelled by the inviter.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_STATUS_CANCELLED = 4;
+   */
+  CANCELLED = 4
+}
+/**
+ * Describes the enum auth.v1.SubaccountInviteStatus.
+ */
+declare const SubaccountInviteStatusSchema: GenEnum<SubaccountInviteStatus>;
+/**
+ * Action to take on a sub-account invitation.
+ *
+ * @generated from enum auth.v1.SubaccountInviteAction
+ */
+declare enum SubaccountInviteAction {
+  /**
+   * No invitation action was specified.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * Accept an incoming invitation as the grantee.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_ACCEPT = 1;
+   */
+  ACCEPT = 1,
+  /**
+   * Decline an incoming invitation as the grantee.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_DECLINE = 2;
+   */
+  DECLINE = 2,
+  /**
+   * Cancel an outgoing invitation as the inviter.
+   *
+   * @generated from enum value: SUBACCOUNT_INVITE_ACTION_CANCEL = 3;
+   */
+  CANCEL = 3
+}
+/**
+ * Describes the enum auth.v1.SubaccountInviteAction.
+ */
+declare const SubaccountInviteActionSchema: GenEnum<SubaccountInviteAction>;
+/**
+ * Entity category affected by an activity event.
+ *
+ * @generated from enum auth.v1.ActivityEntityKind
+ */
+declare enum ActivityEntityKind {
+  /**
+   * No activity entity category was specified.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_UNSPECIFIED = 0;
+   */
+  ACTIVITY_ENTITY_UNSPECIFIED = 0,
+  /**
+   * Root account.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_ACCOUNT = 1;
+   */
+  ACTIVITY_ENTITY_ACCOUNT = 1,
+  /**
+   * Authentication session.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_SESSION = 2;
+   */
+  ACTIVITY_ENTITY_SESSION = 2,
+  /**
+   * API key.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_API_KEY = 3;
+   */
+  ACTIVITY_ENTITY_API_KEY = 3,
+  /**
+   * Sub-account.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_SUBACCOUNT = 4;
+   */
+  ACTIVITY_ENTITY_SUBACCOUNT = 4,
+  /**
+   * Sub-account member.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_MEMBER = 5;
+   */
+  ACTIVITY_ENTITY_MEMBER = 5,
+  /**
+   * Access policy.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_POLICY = 6;
+   */
+  ACTIVITY_ENTITY_POLICY = 6,
+  /**
+   * Sub-account invitation.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_INVITE = 7;
+   */
+  ACTIVITY_ENTITY_INVITE = 7,
+  /**
+   * Account security configuration.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_SECURITY = 8;
+   */
+  ACTIVITY_ENTITY_SECURITY = 8,
+  /**
+   * Saved transfer destination.
+   *
+   * @generated from enum value: ACTIVITY_ENTITY_DESTINATION = 9;
+   */
+  ACTIVITY_ENTITY_DESTINATION = 9
+}
+/**
+ * Describes the enum auth.v1.ActivityEntityKind.
+ */
+declare const ActivityEntityKindSchema: GenEnum<ActivityEntityKind>;
+/**
+ * Action recorded by an activity event.
+ *
+ * @generated from enum auth.v1.ActivityEventAction
+ */
+declare enum ActivityEventAction {
+  /**
+   * No activity action was specified.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_UNSPECIFIED = 0;
+   */
+  ACTIVITY_ACTION_UNSPECIFIED = 0,
+  /**
+   * Entity was created.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_CREATED = 1;
+   */
+  ACTIVITY_ACTION_CREATED = 1,
+  /**
+   * Entity was updated.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_UPDATED = 2;
+   */
+  ACTIVITY_ACTION_UPDATED = 2,
+  /**
+   * Entity was deleted.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_DELETED = 3;
+   */
+  ACTIVITY_ACTION_DELETED = 3,
+  /**
+   * Entity was enabled.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_ENABLED = 4;
+   */
+  ACTIVITY_ACTION_ENABLED = 4,
+  /**
+   * Entity was disabled.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_DISABLED = 5;
+   */
+  ACTIVITY_ACTION_DISABLED = 5,
+  /**
+   * Entity was removed from its parent scope.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_REMOVED = 6;
+   */
+  ACTIVITY_ACTION_REMOVED = 6,
+  /**
+   * Member role was assigned or changed.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_ROLE_SET = 7;
+   */
+  ACTIVITY_ACTION_ROLE_SET = 7,
+  /**
+   * Security challenge or request was received.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_RECEIVED = 8;
+   */
+  ACTIVITY_ACTION_RECEIVED = 8,
+  /**
+   * Invitation or request was answered.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_REPLIED = 9;
+   */
+  ACTIVITY_ACTION_REPLIED = 9,
+  /**
+   * Operation failed.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_FAILED = 10;
+   */
+  ACTIVITY_ACTION_FAILED = 10,
+  /**
+   * Access was revoked.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_REVOKED = 11;
+   */
+  ACTIVITY_ACTION_REVOKED = 11,
+  /**
+   * Operation was blocked.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_BLOCKED = 12;
+   */
+  ACTIVITY_ACTION_BLOCKED = 12,
+  /**
+   * Security hold was placed.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_HOLD_PLACED = 13;
+   */
+  ACTIVITY_ACTION_HOLD_PLACED = 13,
+  /**
+   * Security hold was released.
+   *
+   * @generated from enum value: ACTIVITY_ACTION_HOLD_RELEASED = 14;
+   */
+  ACTIVITY_ACTION_HOLD_RELEASED = 14
+}
+/**
+ * Describes the enum auth.v1.ActivityEventAction.
+ */
+declare const ActivityEventActionSchema: GenEnum<ActivityEventAction>;
+/**
+ * Client channel from which an activity event originated.
+ *
+ * @generated from enum auth.v1.ActivityEventSource
+ */
+declare enum ActivityEventSource {
+  /**
+   * No activity source was specified.
+   *
+   * @generated from enum value: ACTIVITY_SOURCE_UNSPECIFIED = 0;
+   */
+  ACTIVITY_SOURCE_UNSPECIFIED = 0,
+  /**
+   * Web client.
+   *
+   * @generated from enum value: ACTIVITY_SOURCE_WEB = 1;
+   */
+  ACTIVITY_SOURCE_WEB = 1,
+  /**
+   * Mobile client.
+   *
+   * @generated from enum value: ACTIVITY_SOURCE_MOBILE = 2;
+   */
+  ACTIVITY_SOURCE_MOBILE = 2,
+  /**
+   * Programmatic API client.
+   *
+   * @generated from enum value: ACTIVITY_SOURCE_API = 3;
+   */
+  ACTIVITY_SOURCE_API = 3
+}
+/**
+ * Describes the enum auth.v1.ActivityEventSource.
+ */
+declare const ActivityEventSourceSchema: GenEnum<ActivityEventSource>;
+/**
+ * Read service for aggregated sub-account pages.
+ *
+ * @generated from service auth.v1.SubaccountViewService
+ */
+declare const SubaccountViewService: GenService<{
+  /**
+   * Aggregate commonly-needed read data for a sub-account dashboard page.
+   *
+   * @generated from rpc auth.v1.SubaccountViewService.GetSubaccount
+   */
+  getSubaccount: {
+    methodKind: "unary";
+    input: typeof GetSubaccountRequestSchema;
+    output: typeof GetSubaccountResponseSchema;
+  };
+  /**
+   * List audit and activity events for a sub-account.
+   *
+   * @generated from rpc auth.v1.SubaccountViewService.ListSubaccountActivity
+   */
+  listSubaccountActivity: {
+    methodKind: "unary";
+    input: typeof ListSubaccountEventsRequestSchema;
+    output: typeof ListSubaccountEventsResponseSchema;
+  };
+}>;
+/**
+ * Service for creating, updating, sharing, and listing sub-accounts.
+ *
+ * @generated from service auth.v1.SubaccountService
+ */
+declare const SubaccountService: GenService<{
+  /**
+   * List sub-accounts owned by or shared with the caller.
+   *
+   * @generated from rpc auth.v1.SubaccountService.ListSubaccounts
+   */
+  listSubaccounts: {
+    methodKind: "unary";
+    input: typeof ListSubaccountsRequestSchema;
+    output: typeof ListSubaccountsResponseSchema;
+  };
+  /**
+   * Create a new sub-account under the caller's root account.
+   *
+   * @generated from rpc auth.v1.SubaccountService.CreateSubaccount
+   */
+  createSubaccount: {
+    methodKind: "unary";
+    input: typeof CreateSubaccountRequestSchema;
+    output: typeof CreateSubaccountResponseSchema;
+  };
+  /**
+   * Update mutable sub-account fields (label/status/icon/color).
+   *
+   * @generated from rpc auth.v1.SubaccountService.UpdateSubaccount
+   */
+  updateSubaccount: {
+    methodKind: "unary";
+    input: typeof UpdateSubaccountRequestSchema;
+    output: typeof UpdateSubaccountResponseSchema;
+  };
+  /**
+   * Toggle the delegated member MFA requirement for one sub-account (owner only).
+   *
+   * @generated from rpc auth.v1.SubaccountService.SetSubaccountMemberMFARequirement
+   */
+  setSubaccountMemberMFARequirement: {
+    methodKind: "unary";
+    input: typeof SetSubaccountMemberMFARequirementRequestSchema;
+    output: typeof SetSubaccountMemberMFARequirementResponseSchema;
+  };
+  /**
+   * List members for a sub-account (owner/admin only).
+   *
+   * @generated from rpc auth.v1.SubaccountService.ListSubaccountMembers
+   */
+  listSubaccountMembers: {
+    methodKind: "unary";
+    input: typeof ListSubaccountMembersRequestSchema;
+    output: typeof ListSubaccountMembersResponseSchema;
+  };
+  /**
+   * Remove a member from a sub-account (owner/admin only).
+   *
+   * @generated from rpc auth.v1.SubaccountService.RemoveSubaccountMember
+   */
+  removeSubaccountMember: {
+    methodKind: "unary";
+    input: typeof RemoveSubaccountMemberRequestSchema;
+    output: typeof RemoveSubaccountMemberResponseSchema;
+  };
+  /**
+   * Update an existing sub-account member's role (owner/admin only).
+   *
+   * @generated from rpc auth.v1.SubaccountService.UpdateSubaccountMemberRole
+   */
+  updateSubaccountMemberRole: {
+    methodKind: "unary";
+    input: typeof UpdateSubaccountMemberRoleRequestSchema;
+    output: typeof UpdateSubaccountMemberRoleResponseSchema;
+  };
+  /**
+   * Invite a member to a sub-account.
+   *
+   * @generated from rpc auth.v1.SubaccountService.InviteSubaccountMember
+   */
+  inviteSubaccountMember: {
+    methodKind: "unary";
+    input: typeof InviteSubaccountMemberRequestSchema;
+    output: typeof InviteSubaccountMemberResponseSchema;
+  };
+  /**
+   * List incoming/outgoing sub-account invitations.
+   *
+   * @generated from rpc auth.v1.SubaccountService.ListSubaccountInvites
+   */
+  listSubaccountInvites: {
+    methodKind: "unary";
+    input: typeof ListSubaccountInvitesRequestSchema;
+    output: typeof ListSubaccountInvitesResponseSchema;
+  };
+  /**
+   * Accept/decline an invite (grantee) or cancel an invite (inviter).
+   *
+   * @generated from rpc auth.v1.SubaccountService.RespondSubaccountInvite
+   */
+  respondSubaccountInvite: {
+    methodKind: "unary";
+    input: typeof RespondSubaccountInviteRequestSchema;
+    output: typeof RespondSubaccountInviteResponseSchema;
+  };
+}>;
+//#endregion
+export { ActivityEntityKind, ActivityEntityKindSchema, ActivityEvent, ActivityEventAction, ActivityEventActionSchema, ActivityEventSchema, ActivityEventSource, ActivityEventSourceSchema, CreateSubaccountRequest, CreateSubaccountRequestSchema, CreateSubaccountResponse, CreateSubaccountResponseSchema, GetSubaccountRequest, GetSubaccountRequestSchema, GetSubaccountResponse, GetSubaccountResponseSchema, InviteSubaccountMemberRequest, InviteSubaccountMemberRequestSchema, InviteSubaccountMemberResponse, InviteSubaccountMemberResponseSchema, ListSubaccountEventsRequest, ListSubaccountEventsRequestSchema, ListSubaccountEventsResponse, ListSubaccountEventsResponseSchema, ListSubaccountInvitesRequest, ListSubaccountInvitesRequestSchema, ListSubaccountInvitesResponse, ListSubaccountInvitesResponseSchema, ListSubaccountMembersRequest, ListSubaccountMembersRequestSchema, ListSubaccountMembersResponse, ListSubaccountMembersResponseSchema, ListSubaccountsRequest, ListSubaccountsRequestSchema, ListSubaccountsResponse, ListSubaccountsResponseSchema, RemoveSubaccountMemberRequest, RemoveSubaccountMemberRequestSchema, RemoveSubaccountMemberResponse, RemoveSubaccountMemberResponseSchema, RespondSubaccountInviteRequest, RespondSubaccountInviteRequestSchema, RespondSubaccountInviteResponse, RespondSubaccountInviteResponseSchema, SetSubaccountMemberMFARequirementRequest, SetSubaccountMemberMFARequirementRequestSchema, SetSubaccountMemberMFARequirementResponse, SetSubaccountMemberMFARequirementResponseSchema, Subaccount, SubaccountInvite, SubaccountInviteAction, SubaccountInviteActionSchema, SubaccountInviteSchema, SubaccountInviteStatus, SubaccountInviteStatusSchema, SubaccountMemberView, SubaccountMemberViewSchema, SubaccountRole, SubaccountRoleSchema, SubaccountRoleView, SubaccountRoleViewSchema, SubaccountSchema, SubaccountService, SubaccountUpdateSpec, SubaccountUpdateSpecSchema, SubaccountViewService, UpdateSubaccountMemberRoleRequest, UpdateSubaccountMemberRoleRequestSchema, UpdateSubaccountMemberRoleResponse, UpdateSubaccountMemberRoleResponseSchema, UpdateSubaccountRequest, UpdateSubaccountRequestSchema, UpdateSubaccountResponse, UpdateSubaccountResponseSchema, file_auth_v1_subaccounts, subaccounts_pb_d_exports };
+//# sourceMappingURL=subaccounts_pb.d.ts.map