@qlever-llc/trellis 0.6.0 → 0.7.0-rc.2

package/esm/trellis/_sdk/auth/types.d.ts

@@ -1,9 +1,10 @@
 export declare const CONTRACT_ID: "trellis.auth@v1";
-export declare const CONTRACT_DIGEST: "Nf__I64IhjOU59OwMTk0w6r0AuN8O9WDMmNQ-YM3oqk";
-export type AuthActivateWorkloadInput = {
+export declare const CONTRACT_DIGEST: "dBWD48FOHG2R_AEBJ12qvODGydooKoRjRsJO0y-d4hc";
+export type AuthActivateDeviceInput = {
     handoffId: string;
+    linkRequestId: string;
 };
-export type AuthActivateWorkloadOutput = ({
+export type AuthActivateDeviceOutput = ({
     activatedAt: string;
     confirmationCode?: string;
     instanceId: string;
@@ -11,6 +12,7 @@ export type AuthActivateWorkloadOutput = ({
     status: "activated";
 } | {
     instanceId: string;
+    linkRequestId: string;
     profileId: string;
     requestedAt: string;
     reviewId: string;
@@ -19,32 +21,19 @@ export type AuthActivateWorkloadOutput = ({
     reason?: string;
     status: "rejected";
 });
-export type AuthClearLoginPortalSelectionInput = {
-    contractId: string;
-};
-export type AuthClearLoginPortalSelectionOutput = {
-    success: boolean;
-};
-export type AuthClearWorkloadPortalSelectionInput = {
+export type AuthClearDevicePortalSelectionInput = {
     profileId: string;
 };
-export type AuthClearWorkloadPortalSelectionOutput = {
+export type AuthClearDevicePortalSelectionOutput = {
     success: boolean;
 };
-export type AuthCreatePortalInput = {
-    appContractId?: string;
-    entryUrl: string;
-    portalId: string;
+export type AuthClearLoginPortalSelectionInput = {
+    contractId: string;
 };
-export type AuthCreatePortalOutput = {
-    portal: {
-        appContractId?: string;
-        disabled: boolean;
-        entryUrl: string;
-        portalId: string;
-    };
+export type AuthClearLoginPortalSelectionOutput = {
+    success: boolean;
 };
-export type AuthCreateWorkloadProfileInput = {
+export type AuthCreateDeviceProfileInput = {
     allowedDigests: Array<string>;
     contract?: {
         [k: string]: unknown;
@@ -53,7 +42,7 @@ export type AuthCreateWorkloadProfileInput = {
     profileId: string;
     reviewMode?: ("none" | "required");
 };
-export type AuthCreateWorkloadProfileOutput = {
+export type AuthCreateDeviceProfileOutput = {
     profile: {
         allowedDigests: Array<string>;
         contractId: string;
@@ -62,12 +51,25 @@ export type AuthCreateWorkloadProfileOutput = {
         reviewMode?: ("none" | "required");
     };
 };
-export type AuthDecideWorkloadActivationReviewInput = {
+export type AuthCreatePortalInput = {
+    appContractId?: string;
+    entryUrl: string;
+    portalId: string;
+};
+export type AuthCreatePortalOutput = {
+    portal: {
+        appContractId?: string;
+        disabled: boolean;
+        entryUrl: string;
+        portalId: string;
+    };
+};
+export type AuthDecideDeviceActivationReviewInput = {
     decision: ("approve" | "reject");
     reason?: string;
     reviewId: string;
 };
-export type AuthDecideWorkloadActivationReviewOutput = {
+export type AuthDecideDeviceActivationReviewOutput = {
     activation?: {
         activatedAt: string;
         activatedBy?: {
@@ -84,6 +86,7 @@ export type AuthDecideWorkloadActivationReviewOutput = {
     review: {
         decidedAt: (string | null);
         instanceId: string;
+        linkRequestId: string;
         profileId: string;
         publicIdentityKey: string;
         reason?: string;
@@ -92,23 +95,99 @@ export type AuthDecideWorkloadActivationReviewOutput = {
         state: ("pending" | "approved" | "rejected");
     };
 };
+export type AuthDisableDeviceInstanceInput = {
+    instanceId: string;
+};
+export type AuthDisableDeviceInstanceOutput = {
+    success: boolean;
+};
+export type AuthDisableDeviceProfileInput = {
+    profileId: string;
+};
+export type AuthDisableDeviceProfileOutput = {
+    success: boolean;
+};
+export type AuthDisableInstanceGrantPolicyInput = {
+    contractId: string;
+};
+export type AuthDisableInstanceGrantPolicyOutput = {
+    policy: {
+        allowedOrigins?: Array<string>;
+        contractId: string;
+        createdAt: string;
+        disabled: boolean;
+        impliedCapabilities: Array<string>;
+        source: {
+            createdBy?: {
+                id: string;
+                origin: string;
+            };
+            kind: "admin_policy";
+            updatedBy?: {
+                id: string;
+                origin: string;
+            };
+        };
+        updatedAt: string;
+    };
+};
 export type AuthDisablePortalInput = {
     portalId: string;
 };
 export type AuthDisablePortalOutput = {
     success: boolean;
 };
-export type AuthDisableWorkloadInstanceInput = {
-    instanceId: string;
-};
-export type AuthDisableWorkloadInstanceOutput = {
-    success: boolean;
+export type AuthGetDeviceActivationStatusInput = {
+    handoffId: string;
 };
-export type AuthDisableWorkloadProfileInput = {
+export type AuthGetDeviceActivationStatusOutput = ({
+    activatedAt: string;
+    confirmationCode?: string;
+    instanceId: string;
     profileId: string;
+    status: "activated";
+} | {
+    instanceId: string;
+    linkRequestId: string;
+    profileId: string;
+    requestedAt: string;
+    reviewId: string;
+    status: "pending_review";
+} | {
+    reason?: string;
+    status: "rejected";
+});
+export type AuthGetDeviceConnectInfoInput = {
+    contractDigest: string;
+    iat: number;
+    publicIdentityKey: string;
+    sig: string;
 };
-export type AuthDisableWorkloadProfileOutput = {
-    success: boolean;
+export type AuthGetDeviceConnectInfoOutput = {
+    connectInfo: {
+        auth: {
+            iatSkewSeconds: number;
+            mode: "device_identity";
+        };
+        contractDigest: string;
+        contractId: string;
+        instanceId: string;
+        profileId: string;
+        transport: {
+            natsServers: Array<string>;
+            sentinel: {
+                jwt: string;
+                seed: string;
+            };
+        };
+    };
+    status: "ready";
+};
+export type AuthGetDevicePortalDefaultInput = {};
+export type AuthGetDevicePortalDefaultOutput = {
+    defaultPortal: {
+        portalId: (string | null);
+    };
 };
 export type AuthGetInstalledContractInput = {
     digest: string;
@@ -253,6 +332,14 @@ export type AuthGetInstalledContractOutput = {
                     ttlMs: number;
                 };
             };
+            store?: {
+                [k: string]: {
+                    maxObjectBytes?: number;
+                    maxTotalBytes?: number;
+                    name: string;
+                    ttlMs: number;
+                };
+            };
             streams?: {
                 [k: string]: {
                     discard?: string;
@@ -303,6 +390,15 @@ export type AuthGetInstalledContractOutput = {
                     ttlMs?: number;
                 };
             };
+            store?: {
+                [k: string]: {
+                    maxObjectBytes?: number;
+                    maxTotalBytes?: number;
+                    purpose: string;
+                    required?: boolean;
+                    ttlMs?: number;
+                };
+            };
             streams?: {
                 [k: string]: {
                     discard?: string;
@@ -332,57 +428,6 @@ export type AuthGetLoginPortalDefaultOutput = {
         portalId: (string | null);
     };
 };
-export type AuthGetWorkloadActivationStatusInput = {
-    handoffId: string;
-};
-export type AuthGetWorkloadActivationStatusOutput = ({
-    activatedAt: string;
-    confirmationCode?: string;
-    instanceId: string;
-    profileId: string;
-    status: "activated";
-} | {
-    instanceId: string;
-    profileId: string;
-    requestedAt: string;
-    reviewId: string;
-    status: "pending_review";
-} | {
-    reason?: string;
-    status: "rejected";
-});
-export type AuthGetWorkloadConnectInfoInput = {
-    contractDigest: string;
-    iat: number;
-    publicIdentityKey: string;
-    sig: string;
-};
-export type AuthGetWorkloadConnectInfoOutput = {
-    connectInfo: {
-        auth: {
-            iatSkewSeconds: number;
-            mode: "workload_identity";
-        };
-        contractDigest: string;
-        contractId: string;
-        instanceId: string;
-        profileId: string;
-        transport: {
-            natsServers: Array<string>;
-            sentinel: {
-                jwt: string;
-                seed: string;
-            };
-        };
-    };
-    status: "ready";
-};
-export type AuthGetWorkloadPortalDefaultInput = {};
-export type AuthGetWorkloadPortalDefaultOutput = {
-    defaultPortal: {
-        portalId: (string | null);
-    };
-};
 export type AuthHealthInput = {};
 export type AuthHealthOutput = {
     checks: Array<{
@@ -440,6 +485,14 @@ export type AuthInstallServiceOutput = {
                 ttlMs: number;
             };
         };
+        store?: {
+            [k: string]: {
+                maxObjectBytes?: number;
+                maxTotalBytes?: number;
+                name: string;
+                ttlMs: number;
+            };
+        };
         streams?: {
             [k: string]: {
                 discard?: string;
@@ -500,6 +553,81 @@ export type AuthListConnectionsOutput = {
         serverId: string;
     }>;
 };
+export type AuthListDeviceActivationReviewsInput = {
+    instanceId?: string;
+    profileId?: string;
+    state?: ("pending" | "approved" | "rejected");
+};
+export type AuthListDeviceActivationReviewsOutput = {
+    reviews: Array<{
+        decidedAt: (string | null);
+        instanceId: string;
+        linkRequestId: string;
+        profileId: string;
+        publicIdentityKey: string;
+        reason?: string;
+        requestedAt: string;
+        reviewId: string;
+        state: ("pending" | "approved" | "rejected");
+    }>;
+};
+export type AuthListDeviceActivationsInput = {
+    instanceId?: string;
+    profileId?: string;
+    state?: ("activated" | "revoked");
+};
+export type AuthListDeviceActivationsOutput = {
+    activations: Array<{
+        activatedAt: string;
+        activatedBy?: {
+            id: string;
+            origin: string;
+        };
+        instanceId: string;
+        profileId: string;
+        publicIdentityKey: string;
+        revokedAt: (string | null);
+        state: ("activated" | "revoked");
+    }>;
+};
+export type AuthListDeviceInstancesInput = {
+    profileId?: string;
+    state?: ("registered" | "activated" | "revoked" | "disabled");
+};
+export type AuthListDeviceInstancesOutput = {
+    instances: Array<{
+        activatedAt: (string | null);
+        createdAt: string;
+        instanceId: string;
+        metadata?: {
+            [k: string]: string;
+        };
+        profileId: string;
+        publicIdentityKey: string;
+        revokedAt: (string | null);
+        state: ("registered" | "activated" | "revoked" | "disabled");
+    }>;
+};
+export type AuthListDevicePortalSelectionsInput = {};
+export type AuthListDevicePortalSelectionsOutput = {
+    selections: Array<{
+        portalId: (string | null);
+        profileId: string;
+    }>;
+};
+export type AuthListDeviceProfilesInput = {
+    contractId?: string;
+    disabled?: boolean;
+};
+export type AuthListDeviceProfilesOutput = {
+    profiles: Array<{
+        allowedDigests: Array<string>;
+        contractId: string;
+        disabled: boolean;
+        profileId: string;
+        reviewMode?: ("none" | "required");
+    }>;
+};
 export type AuthListInstalledContractsInput = {
     sessionKey?: string;
 };
@@ -554,6 +682,14 @@ export type AuthListInstalledContractsOutput = {
                     ttlMs: number;
                 };
             };
+            store?: {
+                [k: string]: {
+                    maxObjectBytes?: number;
+                    maxTotalBytes?: number;
+                    name: string;
+                    ttlMs: number;
+                };
+            };
             streams?: {
                 [k: string]: {
                     discard?: string;
@@ -577,6 +713,28 @@ export type AuthListInstalledContractsOutput = {
         sessionKey?: string;
     }>;
 };
+export type AuthListInstanceGrantPoliciesInput = {};
+export type AuthListInstanceGrantPoliciesOutput = {
+    policies: Array<{
+        allowedOrigins?: Array<string>;
+        contractId: string;
+        createdAt: string;
+        disabled: boolean;
+        impliedCapabilities: Array<string>;
+        source: {
+            createdBy?: {
+                id: string;
+                origin: string;
+            };
+            kind: "admin_policy";
+            updatedBy?: {
+                id: string;
+                origin: string;
+            };
+        };
+        updatedAt: string;
+    }>;
+};
 export type AuthListLoginPortalSelectionsInput = {};
 export type AuthListLoginPortalSelectionsOutput = {
     selections: Array<{
@@ -638,6 +796,14 @@ export type AuthListServicesOutput = {
                     ttlMs: number;
                 };
             };
+            store?: {
+                [k: string]: {
+                    maxObjectBytes?: number;
+                    maxTotalBytes?: number;
+                    name: string;
+                    ttlMs: number;
+                };
+            };
             streams?: {
                 [k: string]: {
                     discard?: string;
@@ -669,7 +835,7 @@ export type AuthListSessionsOutput = {
         createdAt: string;
         key: string;
         lastAuth: string;
-        type: ("user" | "service" | "workload");
+        type: ("user" | "service" | "device");
     }>;
 };
 export type AuthListUsersInput = {};
@@ -683,83 +849,21 @@ export type AuthListUsersOutput = {
         origin: string;
     }>;
 };
-export type AuthListWorkloadActivationReviewsInput = {
-    instanceId?: string;
-    profileId?: string;
-    state?: ("pending" | "approved" | "rejected");
-};
-export type AuthListWorkloadActivationReviewsOutput = {
-    reviews: Array<{
-        decidedAt: (string | null);
-        instanceId: string;
-        profileId: string;
-        publicIdentityKey: string;
-        reason?: string;
-        requestedAt: string;
-        reviewId: string;
-        state: ("pending" | "approved" | "rejected");
-    }>;
-};
-export type AuthListWorkloadActivationsInput = {
-    instanceId?: string;
-    profileId?: string;
-    state?: ("activated" | "revoked");
-};
-export type AuthListWorkloadActivationsOutput = {
-    activations: Array<{
-        activatedAt: string;
-        activatedBy?: {
-            id: string;
-            origin: string;
-        };
-        instanceId: string;
-        profileId: string;
-        publicIdentityKey: string;
-        revokedAt: (string | null);
-        state: ("activated" | "revoked");
-    }>;
-};
-export type AuthListWorkloadInstancesInput = {
-    profileId?: string;
-    state?: ("registered" | "activated" | "revoked" | "disabled");
-};
-export type AuthListWorkloadInstancesOutput = {
-    instances: Array<{
-        activatedAt: (string | null);
-        createdAt: string;
-        instanceId: string;
-        profileId: string;
-        publicIdentityKey: string;
-        revokedAt: (string | null);
-        state: ("registered" | "activated" | "revoked" | "disabled");
-    }>;
-};
-export type AuthListWorkloadPortalSelectionsInput = {};
-export type AuthListWorkloadPortalSelectionsOutput = {
-    selections: Array<{
-        portalId: (string | null);
-        profileId: string;
-    }>;
-};
-export type AuthListWorkloadProfilesInput = {
-    contractId?: string;
-    disabled?: boolean;
-};
-export type AuthListWorkloadProfilesOutput = {
-    profiles: Array<{
-        allowedDigests: Array<string>;
-        contractId: string;
-        disabled: boolean;
-        profileId: string;
-        reviewMode?: ("none" | "required");
-    }>;
-};
 export type AuthLogoutInput = {};
 export type AuthLogoutOutput = {
     success: boolean;
 };
 export type AuthMeInput = {};
 export type AuthMeOutput = {
+    device: ({
+        active: boolean;
+        capabilities: Array<string>;
+        deviceId: string;
+        deviceType: string;
+        profileId: string;
+        runtimePublicKey: string;
+        type: "device";
+    } | null);
     service: ({
         active: boolean;
         capabilities: Array<string>;
@@ -777,25 +881,23 @@ export type AuthMeOutput = {
         name: string;
         origin: string;
     } | null);
-    workload: ({
-        active: boolean;
-        capabilities: Array<string>;
-        instanceId: string;
-        profileId: string;
-        publicIdentityKey: string;
-        type: "workload";
-    } | null);
 };
-export type AuthProvisionWorkloadInstanceInput = {
+export type AuthProvisionDeviceInstanceInput = {
     activationKey: string;
+    metadata?: {
+        [k: string]: string;
+    };
     profileId: string;
     publicIdentityKey: string;
 };
-export type AuthProvisionWorkloadInstanceOutput = {
+export type AuthProvisionDeviceInstanceOutput = {
     instance: {
         activatedAt: (string | null);
         createdAt: string;
         instanceId: string;
+        metadata?: {
+            [k: string]: string;
+        };
         profileId: string;
         publicIdentityKey: string;
         revokedAt: (string | null);
@@ -821,52 +923,52 @@ export type AuthRevokeApprovalInput = {
 export type AuthRevokeApprovalOutput = {
     success: boolean;
 };
-export type AuthRevokeSessionInput = {
-    sessionKey: string;
+export type AuthRevokeDeviceActivationInput = {
+    instanceId: string;
 };
-export type AuthRevokeSessionOutput = {
+export type AuthRevokeDeviceActivationOutput = {
     success: boolean;
 };
-export type AuthRevokeWorkloadActivationInput = {
-    instanceId: string;
+export type AuthRevokeSessionInput = {
+    sessionKey: string;
 };
-export type AuthRevokeWorkloadActivationOutput = {
+export type AuthRevokeSessionOutput = {
     success: boolean;
 };
-export type AuthSetLoginPortalDefaultInput = {
+export type AuthSetDevicePortalDefaultInput = {
     portalId: (string | null);
 };
-export type AuthSetLoginPortalDefaultOutput = {
+export type AuthSetDevicePortalDefaultOutput = {
     defaultPortal: {
         portalId: (string | null);
     };
 };
-export type AuthSetLoginPortalSelectionInput = {
-    contractId: string;
+export type AuthSetDevicePortalSelectionInput = {
     portalId: (string | null);
+    profileId: string;
 };
-export type AuthSetLoginPortalSelectionOutput = {
+export type AuthSetDevicePortalSelectionOutput = {
     selection: {
-        contractId: string;
         portalId: (string | null);
+        profileId: string;
     };
 };
-export type AuthSetWorkloadPortalDefaultInput = {
+export type AuthSetLoginPortalDefaultInput = {
     portalId: (string | null);
 };
-export type AuthSetWorkloadPortalDefaultOutput = {
+export type AuthSetLoginPortalDefaultOutput = {
     defaultPortal: {
         portalId: (string | null);
     };
 };
-export type AuthSetWorkloadPortalSelectionInput = {
+export type AuthSetLoginPortalSelectionInput = {
+    contractId: string;
     portalId: (string | null);
-    profileId: string;
 };
-export type AuthSetWorkloadPortalSelectionOutput = {
+export type AuthSetLoginPortalSelectionOutput = {
     selection: {
+        contractId: string;
         portalId: (string | null);
-        profileId: string;
     };
 };
 export type AuthUpdateUserInput = {
@@ -919,6 +1021,14 @@ export type AuthUpgradeServiceContractOutput = {
                 ttlMs: number;
             };
         };
+        store?: {
+            [k: string]: {
+                maxObjectBytes?: number;
+                maxTotalBytes?: number;
+                name: string;
+                ttlMs: number;
+            };
+        };
         streams?: {
             [k: string]: {
                 discard?: string;
@@ -942,6 +1052,32 @@ export type AuthUpgradeServiceContractOutput = {
     sessionKey: string;
     success: boolean;
 };
+export type AuthUpsertInstanceGrantPolicyInput = {
+    allowedOrigins?: Array<string>;
+    contractId: string;
+    impliedCapabilities: Array<string>;
+};
+export type AuthUpsertInstanceGrantPolicyOutput = {
+    policy: {
+        allowedOrigins?: Array<string>;
+        contractId: string;
+        createdAt: string;
+        disabled: boolean;
+        impliedCapabilities: Array<string>;
+        source: {
+            createdBy?: {
+                id: string;
+                origin: string;
+            };
+            kind: "admin_policy";
+            updatedBy?: {
+                id: string;
+                origin: string;
+            };
+        };
+        updatedAt: string;
+    };
+};
 export type AuthValidateRequestInput = {
     capabilities?: Array<string>;
     payloadHash: string;
@@ -969,10 +1105,11 @@ export type AuthValidateRequestOutput = {
     } | {
         active: boolean;
         capabilities: Array<string>;
-        instanceId: string;
+        deviceId: string;
+        deviceType: string;
         profileId: string;
-        publicIdentityKey: string;
-        type: "workload";
+        runtimePublicKey: string;
+        type: "device";
     });
     inboxPrefix: string;
 };
@@ -998,6 +1135,19 @@ export type AuthConnectionKickedEvent = ({
     origin: string;
     userNkey: string;
 });
+export type AuthDeviceActivationReviewRequestedEvent = {
+    handoffId: string;
+    instanceId: string;
+    linkRequestId: string;
+    profileId: string;
+    publicIdentityKey: string;
+    requestedAt: string;
+    requestedBy: {
+        id: string;
+        origin: string;
+    };
+    reviewId: string;
+};
 export type AuthDisconnectEvent = ({
     header: {
         id: string;
@@ -1020,54 +1170,58 @@ export type AuthSessionRevokedEvent = ({
     revokedBy: string;
     sessionKey: string;
 });
-export type AuthWorkloadActivationReviewRequestedEvent = {
-    handoffId: string;
-    instanceId: string;
-    profileId: string;
-    publicIdentityKey: string;
-    requestedAt: string;
-    requestedBy: {
-        id: string;
-        origin: string;
-    };
-    reviewId: string;
-};
 export interface RpcMap {
-    "Auth.ActivateWorkload": {
-        input: AuthActivateWorkloadInput;
-        output: AuthActivateWorkloadOutput;
+    "Auth.ActivateDevice": {
+        input: AuthActivateDeviceInput;
+        output: AuthActivateDeviceOutput;
+    };
+    "Auth.ClearDevicePortalSelection": {
+        input: AuthClearDevicePortalSelectionInput;
+        output: AuthClearDevicePortalSelectionOutput;
     };
     "Auth.ClearLoginPortalSelection": {
         input: AuthClearLoginPortalSelectionInput;
         output: AuthClearLoginPortalSelectionOutput;
     };
-    "Auth.ClearWorkloadPortalSelection": {
-        input: AuthClearWorkloadPortalSelectionInput;
-        output: AuthClearWorkloadPortalSelectionOutput;
+    "Auth.CreateDeviceProfile": {
+        input: AuthCreateDeviceProfileInput;
+        output: AuthCreateDeviceProfileOutput;
     };
     "Auth.CreatePortal": {
         input: AuthCreatePortalInput;
         output: AuthCreatePortalOutput;
     };
-    "Auth.CreateWorkloadProfile": {
-        input: AuthCreateWorkloadProfileInput;
-        output: AuthCreateWorkloadProfileOutput;
+    "Auth.DecideDeviceActivationReview": {
+        input: AuthDecideDeviceActivationReviewInput;
+        output: AuthDecideDeviceActivationReviewOutput;
+    };
+    "Auth.DisableDeviceInstance": {
+        input: AuthDisableDeviceInstanceInput;
+        output: AuthDisableDeviceInstanceOutput;
     };
-    "Auth.DecideWorkloadActivationReview": {
-        input: AuthDecideWorkloadActivationReviewInput;
-        output: AuthDecideWorkloadActivationReviewOutput;
+    "Auth.DisableDeviceProfile": {
+        input: AuthDisableDeviceProfileInput;
+        output: AuthDisableDeviceProfileOutput;
+    };
+    "Auth.DisableInstanceGrantPolicy": {
+        input: AuthDisableInstanceGrantPolicyInput;
+        output: AuthDisableInstanceGrantPolicyOutput;
     };
     "Auth.DisablePortal": {
         input: AuthDisablePortalInput;
         output: AuthDisablePortalOutput;
     };
-    "Auth.DisableWorkloadInstance": {
-        input: AuthDisableWorkloadInstanceInput;
-        output: AuthDisableWorkloadInstanceOutput;
+    "Auth.GetDeviceActivationStatus": {
+        input: AuthGetDeviceActivationStatusInput;
+        output: AuthGetDeviceActivationStatusOutput;
+    };
+    "Auth.GetDeviceConnectInfo": {
+        input: AuthGetDeviceConnectInfoInput;
+        output: AuthGetDeviceConnectInfoOutput;
     };
-    "Auth.DisableWorkloadProfile": {
-        input: AuthDisableWorkloadProfileInput;
-        output: AuthDisableWorkloadProfileOutput;
+    "Auth.GetDevicePortalDefault": {
+        input: AuthGetDevicePortalDefaultInput;
+        output: AuthGetDevicePortalDefaultOutput;
     };
     "Auth.GetInstalledContract": {
         input: AuthGetInstalledContractInput;
@@ -1077,18 +1231,6 @@ export interface RpcMap {
         input: AuthGetLoginPortalDefaultInput;
         output: AuthGetLoginPortalDefaultOutput;
     };
-    "Auth.GetWorkloadActivationStatus": {
-        input: AuthGetWorkloadActivationStatusInput;
-        output: AuthGetWorkloadActivationStatusOutput;
-    };
-    "Auth.GetWorkloadConnectInfo": {
-        input: AuthGetWorkloadConnectInfoInput;
-        output: AuthGetWorkloadConnectInfoOutput;
-    };
-    "Auth.GetWorkloadPortalDefault": {
-        input: AuthGetWorkloadPortalDefaultInput;
-        output: AuthGetWorkloadPortalDefaultOutput;
-    };
     "Auth.Health": {
         input: AuthHealthInput;
         output: AuthHealthOutput;
@@ -1109,10 +1251,34 @@ export interface RpcMap {
         input: AuthListConnectionsInput;
         output: AuthListConnectionsOutput;
     };
+    "Auth.ListDeviceActivationReviews": {
+        input: AuthListDeviceActivationReviewsInput;
+        output: AuthListDeviceActivationReviewsOutput;
+    };
+    "Auth.ListDeviceActivations": {
+        input: AuthListDeviceActivationsInput;
+        output: AuthListDeviceActivationsOutput;
+    };
+    "Auth.ListDeviceInstances": {
+        input: AuthListDeviceInstancesInput;
+        output: AuthListDeviceInstancesOutput;
+    };
+    "Auth.ListDevicePortalSelections": {
+        input: AuthListDevicePortalSelectionsInput;
+        output: AuthListDevicePortalSelectionsOutput;
+    };
+    "Auth.ListDeviceProfiles": {
+        input: AuthListDeviceProfilesInput;
+        output: AuthListDeviceProfilesOutput;
+    };
     "Auth.ListInstalledContracts": {
         input: AuthListInstalledContractsInput;
         output: AuthListInstalledContractsOutput;
     };
+    "Auth.ListInstanceGrantPolicies": {
+        input: AuthListInstanceGrantPoliciesInput;
+        output: AuthListInstanceGrantPoliciesOutput;
+    };
     "Auth.ListLoginPortalSelections": {
         input: AuthListLoginPortalSelectionsInput;
         output: AuthListLoginPortalSelectionsOutput;
@@ -1133,26 +1299,6 @@ export interface RpcMap {
         input: AuthListUsersInput;
         output: AuthListUsersOutput;
     };
-    "Auth.ListWorkloadActivationReviews": {
-        input: AuthListWorkloadActivationReviewsInput;
-        output: AuthListWorkloadActivationReviewsOutput;
-    };
-    "Auth.ListWorkloadActivations": {
-        input: AuthListWorkloadActivationsInput;
-        output: AuthListWorkloadActivationsOutput;
-    };
-    "Auth.ListWorkloadInstances": {
-        input: AuthListWorkloadInstancesInput;
-        output: AuthListWorkloadInstancesOutput;
-    };
-    "Auth.ListWorkloadPortalSelections": {
-        input: AuthListWorkloadPortalSelectionsInput;
-        output: AuthListWorkloadPortalSelectionsOutput;
-    };
-    "Auth.ListWorkloadProfiles": {
-        input: AuthListWorkloadProfilesInput;
-        output: AuthListWorkloadProfilesOutput;
-    };
     "Auth.Logout": {
         input: AuthLogoutInput;
         output: AuthLogoutOutput;
@@ -1161,9 +1307,9 @@ export interface RpcMap {
         input: AuthMeInput;
         output: AuthMeOutput;
     };
-    "Auth.ProvisionWorkloadInstance": {
-        input: AuthProvisionWorkloadInstanceInput;
-        output: AuthProvisionWorkloadInstanceOutput;
+    "Auth.ProvisionDeviceInstance": {
+        input: AuthProvisionDeviceInstanceInput;
+        output: AuthProvisionDeviceInstanceOutput;
     };
     "Auth.RenewBindingToken": {
         input: AuthRenewBindingTokenInput;
@@ -1173,13 +1319,21 @@ export interface RpcMap {
         input: AuthRevokeApprovalInput;
         output: AuthRevokeApprovalOutput;
     };
+    "Auth.RevokeDeviceActivation": {
+        input: AuthRevokeDeviceActivationInput;
+        output: AuthRevokeDeviceActivationOutput;
+    };
     "Auth.RevokeSession": {
         input: AuthRevokeSessionInput;
         output: AuthRevokeSessionOutput;
     };
-    "Auth.RevokeWorkloadActivation": {
-        input: AuthRevokeWorkloadActivationInput;
-        output: AuthRevokeWorkloadActivationOutput;
+    "Auth.SetDevicePortalDefault": {
+        input: AuthSetDevicePortalDefaultInput;
+        output: AuthSetDevicePortalDefaultOutput;
+    };
+    "Auth.SetDevicePortalSelection": {
+        input: AuthSetDevicePortalSelectionInput;
+        output: AuthSetDevicePortalSelectionOutput;
     };
     "Auth.SetLoginPortalDefault": {
         input: AuthSetLoginPortalDefaultInput;
@@ -1189,14 +1343,6 @@ export interface RpcMap {
         input: AuthSetLoginPortalSelectionInput;
         output: AuthSetLoginPortalSelectionOutput;
     };
-    "Auth.SetWorkloadPortalDefault": {
-        input: AuthSetWorkloadPortalDefaultInput;
-        output: AuthSetWorkloadPortalDefaultOutput;
-    };
-    "Auth.SetWorkloadPortalSelection": {
-        input: AuthSetWorkloadPortalSelectionInput;
-        output: AuthSetWorkloadPortalSelectionOutput;
-    };
     "Auth.UpdateUser": {
         input: AuthUpdateUserInput;
         output: AuthUpdateUserOutput;
@@ -1205,6 +1351,10 @@ export interface RpcMap {
         input: AuthUpgradeServiceContractInput;
         output: AuthUpgradeServiceContractOutput;
     };
+    "Auth.UpsertInstanceGrantPolicy": {
+        input: AuthUpsertInstanceGrantPolicyInput;
+        output: AuthUpsertInstanceGrantPolicyOutput;
+    };
     "Auth.ValidateRequest": {
         input: AuthValidateRequestInput;
         output: AuthValidateRequestOutput;
@@ -1217,15 +1367,15 @@ export interface EventMap {
     "Auth.ConnectionKicked": {
         event: AuthConnectionKickedEvent;
     };
+    "Auth.DeviceActivationReviewRequested": {
+        event: AuthDeviceActivationReviewRequestedEvent;
+    };
     "Auth.Disconnect": {
         event: AuthDisconnectEvent;
     };
     "Auth.SessionRevoked": {
         event: AuthSessionRevokedEvent;
     };
-    "Auth.WorkloadActivationReviewRequested": {
-        event: AuthWorkloadActivationReviewRequestedEvent;
-    };
 }
 export interface SubjectMap {
 }