@sealant/runtime-protocol-next 0.0.0-next.0 → 0.20.0-next.142

package/dist/gen/sealant_pb.d.ts

@@ -0,0 +1,3387 @@
+import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file sealant.proto.
+ */
+export declare const file_sealant: GenFile;
+/**
+ * @generated from message sealant.v1.EnvVar
+ */
+export type EnvVar = Message<"sealant.v1.EnvVar"> & {
+    /**
+     * @generated from field: string key = 1;
+     */
+    key: string;
+    /**
+     * @generated from field: string value = 2;
+     */
+    value: string;
+};
+/**
+ * Describes the message sealant.v1.EnvVar.
+ * Use `create(EnvVarSchema)` to create a new message.
+ */
+export declare const EnvVarSchema: GenMessage<EnvVar>;
+/**
+ * @generated from message sealant.v1.CapturePolicy
+ */
+export type CapturePolicy = Message<"sealant.v1.CapturePolicy"> & {
+    /**
+     * @generated from field: sealant.v1.CaptureMode stdout = 1;
+     */
+    stdout: CaptureMode;
+    /**
+     * @generated from field: sealant.v1.CaptureMode stderr = 2;
+     */
+    stderr: CaptureMode;
+    /**
+     * @generated from field: sealant.v1.CaptureMode stdin = 3;
+     */
+    stdin: CaptureMode;
+};
+/**
+ * Describes the message sealant.v1.CapturePolicy.
+ * Use `create(CapturePolicySchema)` to create a new message.
+ */
+export declare const CapturePolicySchema: GenMessage<CapturePolicy>;
+/**
+ * @generated from message sealant.v1.ArtifactRef
+ */
+export type ArtifactRef = Message<"sealant.v1.ArtifactRef"> & {
+    /**
+     * @generated from field: string algo = 1;
+     */
+    algo: string;
+    /**
+     * @generated from field: string hash = 2;
+     */
+    hash: string;
+    /**
+     * @generated from field: uint64 bytes = 3;
+     */
+    bytes: bigint;
+};
+/**
+ * Describes the message sealant.v1.ArtifactRef.
+ * Use `create(ArtifactRefSchema)` to create a new message.
+ */
+export declare const ArtifactRefSchema: GenMessage<ArtifactRef>;
+/**
+ * @generated from message sealant.v1.TransformMeta
+ */
+export type TransformMeta = Message<"sealant.v1.TransformMeta"> & {
+    /**
+     * @generated from field: bool redacted = 1;
+     */
+    redacted: boolean;
+    /**
+     * @generated from field: bool truncated = 2;
+     */
+    truncated: boolean;
+    /**
+     * @generated from field: bool coalesced = 3;
+     */
+    coalesced: boolean;
+    /**
+     * @generated from field: optional uint64 original_byte_count = 4;
+     */
+    originalByteCount?: bigint | undefined;
+};
+/**
+ * Describes the message sealant.v1.TransformMeta.
+ * Use `create(TransformMetaSchema)` to create a new message.
+ */
+export declare const TransformMetaSchema: GenMessage<TransformMeta>;
+/**
+ * @generated from message sealant.v1.Limits
+ */
+export type Limits = Message<"sealant.v1.Limits"> & {
+    /**
+     * @generated from field: uint32 max_frame_bytes = 1;
+     */
+    maxFrameBytes: number;
+    /**
+     * @generated from field: uint32 max_processes = 2;
+     */
+    maxProcesses: number;
+    /**
+     * @generated from field: uint32 max_sessions = 3;
+     */
+    maxSessions: number;
+    /**
+     * @generated from field: uint64 event_queue_capacity = 4;
+     */
+    eventQueueCapacity: bigint;
+    /**
+     * @generated from field: uint64 spool_limit_bytes = 5;
+     */
+    spoolLimitBytes: bigint;
+    /**
+     * @generated from field: uint64 max_inline_payload_bytes = 6;
+     */
+    maxInlinePayloadBytes: bigint;
+    /**
+     * @generated from field: uint32 io_chunk_bytes = 7;
+     */
+    ioChunkBytes: number;
+};
+/**
+ * Describes the message sealant.v1.Limits.
+ * Use `create(LimitsSchema)` to create a new message.
+ */
+export declare const LimitsSchema: GenMessage<Limits>;
+/**
+ * @generated from message sealant.v1.FeatureMatrix
+ */
+export type FeatureMatrix = Message<"sealant.v1.FeatureMatrix"> & {
+    /**
+     * @generated from field: bool io_capture = 1;
+     */
+    ioCapture: boolean;
+    /**
+     * @generated from field: bool pty = 2;
+     */
+    pty: boolean;
+    /**
+     * @generated from field: bool filesystem = 3;
+     */
+    filesystem: boolean;
+    /**
+     * @generated from field: sealant.v1.NetworkMode network = 4;
+     */
+    network: NetworkMode;
+    /**
+     * @generated from field: bool privileged = 5;
+     */
+    privileged: boolean;
+    /**
+     * @generated from field: bool pidfd = 6;
+     */
+    pidfd: boolean;
+    /**
+     * @generated from field: bool subreaper = 7;
+     */
+    subreaper: boolean;
+    /**
+     * Pipe-mode sessions (`OpenSessionArgs.mode = SESSION_MODE_PIPE`) available.
+     *
+     * @generated from field: bool pipe_sessions = 8;
+     */
+    pipeSessions: boolean;
+};
+/**
+ * Describes the message sealant.v1.FeatureMatrix.
+ * Use `create(FeatureMatrixSchema)` to create a new message.
+ */
+export declare const FeatureMatrixSchema: GenMessage<FeatureMatrix>;
+/**
+ * @generated from message sealant.v1.FeatureState
+ */
+export type FeatureState = Message<"sealant.v1.FeatureState"> & {
+    /**
+     * @generated from field: sealant.v1.Feature feature = 1;
+     */
+    feature: Feature;
+    /**
+     * @generated from field: bool enabled = 2;
+     */
+    enabled: boolean;
+};
+/**
+ * Describes the message sealant.v1.FeatureState.
+ * Use `create(FeatureStateSchema)` to create a new message.
+ */
+export declare const FeatureStateSchema: GenMessage<FeatureState>;
+/**
+ * @generated from message sealant.v1.ProcessStarted
+ */
+export type ProcessStarted = Message<"sealant.v1.ProcessStarted"> & {
+    /**
+     * @generated from field: int32 pid = 1;
+     */
+    pid: number;
+    /**
+     * @generated from field: int32 pgid = 2;
+     */
+    pgid: number;
+    /**
+     * @generated from field: bool pidfd = 3;
+     */
+    pidfd: boolean;
+    /**
+     * @generated from field: string executable = 4;
+     */
+    executable: string;
+    /**
+     * @generated from field: repeated string args = 5;
+     */
+    args: string[];
+    /**
+     * @generated from field: string cwd = 6;
+     */
+    cwd: string;
+    /**
+     * @generated from field: int64 started_at = 7;
+     */
+    startedAt: bigint;
+};
+/**
+ * Describes the message sealant.v1.ProcessStarted.
+ * Use `create(ProcessStartedSchema)` to create a new message.
+ */
+export declare const ProcessStartedSchema: GenMessage<ProcessStarted>;
+/**
+ * @generated from message sealant.v1.ProcessExited
+ */
+export type ProcessExited = Message<"sealant.v1.ProcessExited"> & {
+    /**
+     * @generated from field: optional int32 exit_code = 1;
+     */
+    exitCode?: number | undefined;
+    /**
+     * @generated from field: optional int32 signal = 2;
+     */
+    signal?: number | undefined;
+    /**
+     * @generated from field: sealant.v1.ExitReason reason = 3;
+     */
+    reason: ExitReason;
+    /**
+     * @generated from field: uint64 duration_micros = 4;
+     */
+    durationMicros: bigint;
+};
+/**
+ * Describes the message sealant.v1.ProcessExited.
+ * Use `create(ProcessExitedSchema)` to create a new message.
+ */
+export declare const ProcessExitedSchema: GenMessage<ProcessExited>;
+/**
+ * @generated from message sealant.v1.IoChunk
+ */
+export type IoChunk = Message<"sealant.v1.IoChunk"> & {
+    /**
+     * @generated from field: sealant.v1.StreamKind stream = 1;
+     */
+    stream: StreamKind;
+    /**
+     * @generated from field: uint64 byte_count = 2;
+     */
+    byteCount: bigint;
+    /**
+     * @generated from field: uint64 stream_offset = 3;
+     */
+    streamOffset: bigint;
+    /**
+     * @generated from field: optional bytes content = 4;
+     */
+    content?: Uint8Array | undefined;
+    /**
+     * @generated from field: optional sealant.v1.ArtifactRef artifact = 5;
+     */
+    artifact?: ArtifactRef | undefined;
+    /**
+     * @generated from field: optional sealant.v1.TransformMeta transform = 6;
+     */
+    transform?: TransformMeta | undefined;
+};
+/**
+ * Describes the message sealant.v1.IoChunk.
+ * Use `create(IoChunkSchema)` to create a new message.
+ */
+export declare const IoChunkSchema: GenMessage<IoChunk>;
+/**
+ * @generated from message sealant.v1.RuntimeStateChanged
+ */
+export type RuntimeStateChanged = Message<"sealant.v1.RuntimeStateChanged"> & {
+    /**
+     * @generated from field: sealant.v1.RuntimeState state = 1;
+     */
+    state: RuntimeState;
+    /**
+     * @generated from field: optional string reason = 2;
+     */
+    reason?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.RuntimeStateChanged.
+ * Use `create(RuntimeStateChangedSchema)` to create a new message.
+ */
+export declare const RuntimeStateChangedSchema: GenMessage<RuntimeStateChanged>;
+/**
+ * @generated from message sealant.v1.RuntimeHeartbeat
+ */
+export type RuntimeHeartbeat = Message<"sealant.v1.RuntimeHeartbeat"> & {
+    /**
+     * @generated from field: sealant.v1.RuntimeState state = 1;
+     */
+    state: RuntimeState;
+};
+/**
+ * Describes the message sealant.v1.RuntimeHeartbeat.
+ * Use `create(RuntimeHeartbeatSchema)` to create a new message.
+ */
+export declare const RuntimeHeartbeatSchema: GenMessage<RuntimeHeartbeat>;
+/**
+ * @generated from message sealant.v1.TelemetryDropped
+ */
+export type TelemetryDropped = Message<"sealant.v1.TelemetryDropped"> & {
+    /**
+     * @generated from field: string reason = 1;
+     */
+    reason: string;
+    /**
+     * @generated from field: uint64 count = 2;
+     */
+    count: bigint;
+    /**
+     * @generated from field: sealant.v1.EventPriority priority = 3;
+     */
+    priority: EventPriority;
+};
+/**
+ * Describes the message sealant.v1.TelemetryDropped.
+ * Use `create(TelemetryDroppedSchema)` to create a new message.
+ */
+export declare const TelemetryDroppedSchema: GenMessage<TelemetryDropped>;
+/**
+ * @generated from message sealant.v1.FileEntry
+ */
+export type FileEntry = Message<"sealant.v1.FileEntry"> & {
+    /**
+     * @generated from field: string path = 1;
+     */
+    path: string;
+    /**
+     * @generated from field: sealant.v1.FileType file_type = 2;
+     */
+    fileType: FileType;
+    /**
+     * @generated from field: uint64 size = 3;
+     */
+    size: bigint;
+    /**
+     * @generated from field: int64 mtime_micros = 4;
+     */
+    mtimeMicros: bigint;
+    /**
+     * @generated from field: uint32 mode = 5;
+     */
+    mode: number;
+    /**
+     * @generated from field: optional string hash = 6;
+     */
+    hash?: string | undefined;
+    /**
+     * @generated from field: optional string symlink_target = 7;
+     */
+    symlinkTarget?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.FileEntry.
+ * Use `create(FileEntrySchema)` to create a new message.
+ */
+export declare const FileEntrySchema: GenMessage<FileEntry>;
+/**
+ * @generated from message sealant.v1.FileChange
+ */
+export type FileChange = Message<"sealant.v1.FileChange"> & {
+    /**
+     * @generated from field: sealant.v1.FileChangeKind kind = 1;
+     */
+    kind: FileChangeKind;
+    /**
+     * @generated from field: string path = 2;
+     */
+    path: string;
+    /**
+     * @generated from field: optional string rename_from = 3;
+     */
+    renameFrom?: string | undefined;
+    /**
+     * @generated from field: optional sealant.v1.FileEntry entry = 4;
+     */
+    entry?: FileEntry | undefined;
+    /**
+     * @generated from field: bool certain = 5;
+     */
+    certain: boolean;
+};
+/**
+ * Describes the message sealant.v1.FileChange.
+ * Use `create(FileChangeSchema)` to create a new message.
+ */
+export declare const FileChangeSchema: GenMessage<FileChange>;
+/**
+ * @generated from message sealant.v1.FileWatchOverflow
+ */
+export type FileWatchOverflow = Message<"sealant.v1.FileWatchOverflow"> & {
+    /**
+     * @generated from field: string root = 1;
+     */
+    root: string;
+};
+/**
+ * Describes the message sealant.v1.FileWatchOverflow.
+ * Use `create(FileWatchOverflowSchema)` to create a new message.
+ */
+export declare const FileWatchOverflowSchema: GenMessage<FileWatchOverflow>;
+/**
+ * @generated from message sealant.v1.FileSnapshotCompleted
+ */
+export type FileSnapshotCompleted = Message<"sealant.v1.FileSnapshotCompleted"> & {
+    /**
+     * @generated from field: string root = 1;
+     */
+    root: string;
+    /**
+     * @generated from field: uint64 file_count = 2;
+     */
+    fileCount: bigint;
+};
+/**
+ * Describes the message sealant.v1.FileSnapshotCompleted.
+ * Use `create(FileSnapshotCompletedSchema)` to create a new message.
+ */
+export declare const FileSnapshotCompletedSchema: GenMessage<FileSnapshotCompleted>;
+/**
+ * @generated from message sealant.v1.FileDiffAvailable
+ */
+export type FileDiffAvailable = Message<"sealant.v1.FileDiffAvailable"> & {
+    /**
+     * @generated from field: uint64 added = 1;
+     */
+    added: bigint;
+    /**
+     * @generated from field: uint64 modified = 2;
+     */
+    modified: bigint;
+    /**
+     * @generated from field: uint64 deleted = 3;
+     */
+    deleted: bigint;
+    /**
+     * @generated from field: uint64 renamed = 4;
+     */
+    renamed: bigint;
+};
+/**
+ * Describes the message sealant.v1.FileDiffAvailable.
+ * Use `create(FileDiffAvailableSchema)` to create a new message.
+ */
+export declare const FileDiffAvailableSchema: GenMessage<FileDiffAvailable>;
+/**
+ * @generated from message sealant.v1.NetworkRequest
+ */
+export type NetworkRequest = Message<"sealant.v1.NetworkRequest"> & {
+    /**
+     * @generated from field: sealant.v1.NetworkScheme scheme = 1;
+     */
+    scheme: NetworkScheme;
+    /**
+     * @generated from field: optional string method = 2;
+     */
+    method?: string | undefined;
+    /**
+     * @generated from field: string host = 3;
+     */
+    host: string;
+    /**
+     * @generated from field: uint32 port = 4;
+     */
+    port: number;
+    /**
+     * @generated from field: optional string path = 5;
+     */
+    path?: string | undefined;
+    /**
+     * @generated from field: optional uint32 status = 6;
+     */
+    status?: number | undefined;
+    /**
+     * @generated from field: uint64 bytes_sent = 7;
+     */
+    bytesSent: bigint;
+    /**
+     * @generated from field: uint64 bytes_received = 8;
+     */
+    bytesReceived: bigint;
+    /**
+     * @generated from field: uint64 duration_micros = 9;
+     */
+    durationMicros: bigint;
+};
+/**
+ * Describes the message sealant.v1.NetworkRequest.
+ * Use `create(NetworkRequestSchema)` to create a new message.
+ */
+export declare const NetworkRequestSchema: GenMessage<NetworkRequest>;
+/**
+ * @generated from message sealant.v1.NetworkSourceObserved
+ */
+export type NetworkSourceObserved = Message<"sealant.v1.NetworkSourceObserved"> & {
+    /**
+     * @generated from field: string host = 1;
+     */
+    host: string;
+    /**
+     * @generated from field: repeated string resolved_ips = 2;
+     */
+    resolvedIps: string[];
+    /**
+     * @generated from field: uint32 port = 3;
+     */
+    port: number;
+    /**
+     * @generated from field: optional sealant.v1.NetworkScheme scheme = 4;
+     */
+    scheme?: NetworkScheme | undefined;
+    /**
+     * @generated from field: optional string method = 5;
+     */
+    method?: string | undefined;
+    /**
+     * @generated from field: optional string path = 6;
+     */
+    path?: string | undefined;
+    /**
+     * @generated from field: optional uint32 status = 7;
+     */
+    status?: number | undefined;
+};
+/**
+ * Describes the message sealant.v1.NetworkSourceObserved.
+ * Use `create(NetworkSourceObservedSchema)` to create a new message.
+ */
+export declare const NetworkSourceObservedSchema: GenMessage<NetworkSourceObserved>;
+/**
+ * @generated from message sealant.v1.EventEnvelope
+ */
+export type EventEnvelope = Message<"sealant.v1.EventEnvelope"> & {
+    /**
+     * @generated from field: uint32 schema_version = 1;
+     */
+    schemaVersion: number;
+    /**
+     * @generated from field: string event_id = 2;
+     */
+    eventId: string;
+    /**
+     * @generated from field: string runtime_id = 3;
+     */
+    runtimeId: string;
+    /**
+     * @generated from field: optional string execution_id = 4;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string session_id = 5;
+     */
+    sessionId?: string | undefined;
+    /**
+     * @generated from field: optional string process_id = 6;
+     */
+    processId?: string | undefined;
+    /**
+     * @generated from field: optional string request_id = 7;
+     */
+    requestId?: string | undefined;
+    /**
+     * @generated from field: uint64 sequence = 8;
+     */
+    sequence: bigint;
+    /**
+     * @generated from field: int64 observed_at = 9;
+     */
+    observedAt: bigint;
+    /**
+     * @generated from field: uint64 monotonic_timestamp = 10;
+     */
+    monotonicTimestamp: bigint;
+    /**
+     * @generated from field: sealant.v1.CaptureMethod capture_method = 11;
+     */
+    captureMethod: CaptureMethod;
+    /**
+     * @generated from field: sealant.v1.Confidence confidence = 12;
+     */
+    confidence: Confidence;
+    /**
+     * @generated from oneof sealant.v1.EventEnvelope.payload
+     */
+    payload: {
+        /**
+         * @generated from field: sealant.v1.RuntimeStateChanged runtime_state_changed = 20;
+         */
+        value: RuntimeStateChanged;
+        case: "runtimeStateChanged";
+    } | {
+        /**
+         * @generated from field: sealant.v1.RuntimeHeartbeat runtime_heartbeat = 21;
+         */
+        value: RuntimeHeartbeat;
+        case: "runtimeHeartbeat";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ProcessStarted process_started = 22;
+         */
+        value: ProcessStarted;
+        case: "processStarted";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ProcessExited process_exited = 23;
+         */
+        value: ProcessExited;
+        case: "processExited";
+    } | {
+        /**
+         * @generated from field: sealant.v1.IoChunk io_chunk = 24;
+         */
+        value: IoChunk;
+        case: "ioChunk";
+    } | {
+        /**
+         * @generated from field: sealant.v1.TelemetryDropped telemetry_dropped = 25;
+         */
+        value: TelemetryDropped;
+        case: "telemetryDropped";
+    } | {
+        /**
+         * @generated from field: sealant.v1.FileChange file_change = 26;
+         */
+        value: FileChange;
+        case: "fileChange";
+    } | {
+        /**
+         * @generated from field: sealant.v1.FileWatchOverflow file_watch_overflow = 27;
+         */
+        value: FileWatchOverflow;
+        case: "fileWatchOverflow";
+    } | {
+        /**
+         * @generated from field: sealant.v1.FileSnapshotCompleted file_snapshot_completed = 28;
+         */
+        value: FileSnapshotCompleted;
+        case: "fileSnapshotCompleted";
+    } | {
+        /**
+         * @generated from field: sealant.v1.FileDiffAvailable file_diff_available = 29;
+         */
+        value: FileDiffAvailable;
+        case: "fileDiffAvailable";
+    } | {
+        /**
+         * @generated from field: sealant.v1.NetworkRequest network_request = 30;
+         */
+        value: NetworkRequest;
+        case: "networkRequest";
+    } | {
+        /**
+         * @generated from field: sealant.v1.NetworkSourceObserved network_source_observed = 31;
+         */
+        value: NetworkSourceObserved;
+        case: "networkSourceObserved";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.EventEnvelope.
+ * Use `create(EventEnvelopeSchema)` to create a new message.
+ */
+export declare const EventEnvelopeSchema: GenMessage<EventEnvelope>;
+/**
+ * @generated from message sealant.v1.ExecArgs
+ */
+export type ExecArgs = Message<"sealant.v1.ExecArgs"> & {
+    /**
+     * @generated from field: optional string execution_id = 1;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string session_id = 2;
+     */
+    sessionId?: string | undefined;
+    /**
+     * @generated from field: string executable = 3;
+     */
+    executable: string;
+    /**
+     * @generated from field: repeated string args = 4;
+     */
+    args: string[];
+    /**
+     * @generated from field: optional string cwd = 5;
+     */
+    cwd?: string | undefined;
+    /**
+     * @generated from field: repeated sealant.v1.EnvVar env = 6;
+     */
+    env: EnvVar[];
+    /**
+     * @generated from field: bool stdin = 7;
+     */
+    stdin: boolean;
+    /**
+     * @generated from field: optional uint64 timeout_millis = 8;
+     */
+    timeoutMillis?: bigint | undefined;
+    /**
+     * @generated from field: bool background = 9;
+     */
+    background: boolean;
+    /**
+     * @generated from field: optional sealant.v1.CapturePolicy capture = 10;
+     */
+    capture?: CapturePolicy | undefined;
+    /**
+     * @generated from field: optional sealant.v1.Signal graceful_signal = 11;
+     */
+    gracefulSignal?: Signal | undefined;
+    /**
+     * @generated from field: bool attach = 12;
+     */
+    attach: boolean;
+};
+/**
+ * Describes the message sealant.v1.ExecArgs.
+ * Use `create(ExecArgsSchema)` to create a new message.
+ */
+export declare const ExecArgsSchema: GenMessage<ExecArgs>;
+/**
+ * @generated from message sealant.v1.ExecutionStartArgs
+ */
+export type ExecutionStartArgs = Message<"sealant.v1.ExecutionStartArgs"> & {
+    /**
+     * @generated from field: optional string execution_id = 1;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string labels_json = 2;
+     */
+    labelsJson?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.ExecutionStartArgs.
+ * Use `create(ExecutionStartArgsSchema)` to create a new message.
+ */
+export declare const ExecutionStartArgsSchema: GenMessage<ExecutionStartArgs>;
+/**
+ * @generated from message sealant.v1.WriteStdinArgs
+ */
+export type WriteStdinArgs = Message<"sealant.v1.WriteStdinArgs"> & {
+    /**
+     * @generated from field: optional string process_id = 1;
+     */
+    processId?: string | undefined;
+    /**
+     * @generated from field: optional string session_id = 2;
+     */
+    sessionId?: string | undefined;
+    /**
+     * @generated from field: bytes data = 3;
+     */
+    data: Uint8Array;
+};
+/**
+ * Describes the message sealant.v1.WriteStdinArgs.
+ * Use `create(WriteStdinArgsSchema)` to create a new message.
+ */
+export declare const WriteStdinArgsSchema: GenMessage<WriteStdinArgs>;
+/**
+ * @generated from message sealant.v1.OpenSessionArgs
+ */
+export type OpenSessionArgs = Message<"sealant.v1.OpenSessionArgs"> & {
+    /**
+     * @generated from field: optional string execution_id = 1;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string shell = 2;
+     */
+    shell?: string | undefined;
+    /**
+     * @generated from field: repeated string args = 3;
+     */
+    args: string[];
+    /**
+     * @generated from field: optional string cwd = 4;
+     */
+    cwd?: string | undefined;
+    /**
+     * @generated from field: repeated sealant.v1.EnvVar env = 5;
+     */
+    env: EnvVar[];
+    /**
+     * @generated from field: uint32 cols = 6;
+     */
+    cols: number;
+    /**
+     * @generated from field: uint32 rows = 7;
+     */
+    rows: number;
+    /**
+     * @generated from field: optional string term = 8;
+     */
+    term?: string | undefined;
+    /**
+     * Defaults to PTY when unspecified (wire compatibility with pre-pipe clients).
+     *
+     * @generated from field: sealant.v1.SessionMode mode = 9;
+     */
+    mode: SessionMode;
+};
+/**
+ * Describes the message sealant.v1.OpenSessionArgs.
+ * Use `create(OpenSessionArgsSchema)` to create a new message.
+ */
+export declare const OpenSessionArgsSchema: GenMessage<OpenSessionArgs>;
+/**
+ * @generated from message sealant.v1.RuntimeGracefulShutdownArgs
+ */
+export type RuntimeGracefulShutdownArgs = Message<"sealant.v1.RuntimeGracefulShutdownArgs"> & {
+    /**
+     * @generated from field: optional uint64 grace_millis = 1;
+     */
+    graceMillis?: bigint | undefined;
+};
+/**
+ * Describes the message sealant.v1.RuntimeGracefulShutdownArgs.
+ * Use `create(RuntimeGracefulShutdownArgsSchema)` to create a new message.
+ */
+export declare const RuntimeGracefulShutdownArgsSchema: GenMessage<RuntimeGracefulShutdownArgs>;
+/**
+ * @generated from message sealant.v1.ExecutionStopArgs
+ */
+export type ExecutionStopArgs = Message<"sealant.v1.ExecutionStopArgs"> & {
+    /**
+     * @generated from field: string execution_id = 1;
+     */
+    executionId: string;
+};
+/**
+ * Describes the message sealant.v1.ExecutionStopArgs.
+ * Use `create(ExecutionStopArgsSchema)` to create a new message.
+ */
+export declare const ExecutionStopArgsSchema: GenMessage<ExecutionStopArgs>;
+/**
+ * @generated from message sealant.v1.SignalProcessArgs
+ */
+export type SignalProcessArgs = Message<"sealant.v1.SignalProcessArgs"> & {
+    /**
+     * @generated from field: string process_id = 1;
+     */
+    processId: string;
+    /**
+     * @generated from field: sealant.v1.Signal signal = 2;
+     */
+    signal: Signal;
+};
+/**
+ * Describes the message sealant.v1.SignalProcessArgs.
+ * Use `create(SignalProcessArgsSchema)` to create a new message.
+ */
+export declare const SignalProcessArgsSchema: GenMessage<SignalProcessArgs>;
+/**
+ * @generated from message sealant.v1.KillProcessArgs
+ */
+export type KillProcessArgs = Message<"sealant.v1.KillProcessArgs"> & {
+    /**
+     * @generated from field: string process_id = 1;
+     */
+    processId: string;
+};
+/**
+ * Describes the message sealant.v1.KillProcessArgs.
+ * Use `create(KillProcessArgsSchema)` to create a new message.
+ */
+export declare const KillProcessArgsSchema: GenMessage<KillProcessArgs>;
+/**
+ * @generated from message sealant.v1.ListProcessesArgs
+ */
+export type ListProcessesArgs = Message<"sealant.v1.ListProcessesArgs"> & {
+    /**
+     * @generated from field: optional string execution_id = 1;
+     */
+    executionId?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.ListProcessesArgs.
+ * Use `create(ListProcessesArgsSchema)` to create a new message.
+ */
+export declare const ListProcessesArgsSchema: GenMessage<ListProcessesArgs>;
+/**
+ * @generated from message sealant.v1.CloseStdinArgs
+ */
+export type CloseStdinArgs = Message<"sealant.v1.CloseStdinArgs"> & {
+    /**
+     * @generated from field: string process_id = 1;
+     */
+    processId: string;
+};
+/**
+ * Describes the message sealant.v1.CloseStdinArgs.
+ * Use `create(CloseStdinArgsSchema)` to create a new message.
+ */
+export declare const CloseStdinArgsSchema: GenMessage<CloseStdinArgs>;
+/**
+ * @generated from message sealant.v1.CloseSessionArgs
+ */
+export type CloseSessionArgs = Message<"sealant.v1.CloseSessionArgs"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+};
+/**
+ * Describes the message sealant.v1.CloseSessionArgs.
+ * Use `create(CloseSessionArgsSchema)` to create a new message.
+ */
+export declare const CloseSessionArgsSchema: GenMessage<CloseSessionArgs>;
+/**
+ * @generated from message sealant.v1.ResizePtyArgs
+ */
+export type ResizePtyArgs = Message<"sealant.v1.ResizePtyArgs"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: uint32 cols = 2;
+     */
+    cols: number;
+    /**
+     * @generated from field: uint32 rows = 3;
+     */
+    rows: number;
+};
+/**
+ * Describes the message sealant.v1.ResizePtyArgs.
+ * Use `create(ResizePtyArgsSchema)` to create a new message.
+ */
+export declare const ResizePtyArgsSchema: GenMessage<ResizePtyArgs>;
+/**
+ * @generated from message sealant.v1.SetFeatureStateArgs
+ */
+export type SetFeatureStateArgs = Message<"sealant.v1.SetFeatureStateArgs"> & {
+    /**
+     * @generated from field: sealant.v1.Feature feature = 1;
+     */
+    feature: Feature;
+    /**
+     * @generated from field: bool enabled = 2;
+     */
+    enabled: boolean;
+};
+/**
+ * Describes the message sealant.v1.SetFeatureStateArgs.
+ * Use `create(SetFeatureStateArgsSchema)` to create a new message.
+ */
+export declare const SetFeatureStateArgsSchema: GenMessage<SetFeatureStateArgs>;
+/**
+ * @generated from message sealant.v1.Empty
+ */
+export type Empty = Message<"sealant.v1.Empty"> & {};
+/**
+ * Describes the message sealant.v1.Empty.
+ * Use `create(EmptySchema)` to create a new message.
+ */
+export declare const EmptySchema: GenMessage<Empty>;
+/**
+ * @generated from message sealant.v1.AttachSessionArgs
+ */
+export type AttachSessionArgs = Message<"sealant.v1.AttachSessionArgs"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: sealant.v1.AttachMode mode = 2;
+     */
+    mode: AttachMode;
+    /**
+     * When set, replay the session's durable output journal starting at this sequence (clamped to
+     * the first retained record) before live frames; data-frame `seq` values are journal sequences.
+     * Absent = live tail only (no replay).
+     *
+     * @generated from field: optional uint64 from_sequence = 3;
+     */
+    fromSequence?: bigint | undefined;
+};
+/**
+ * Describes the message sealant.v1.AttachSessionArgs.
+ * Use `create(AttachSessionArgsSchema)` to create a new message.
+ */
+export declare const AttachSessionArgsSchema: GenMessage<AttachSessionArgs>;
+/**
+ * @generated from message sealant.v1.SignalSessionArgs
+ */
+export type SignalSessionArgs = Message<"sealant.v1.SignalSessionArgs"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: sealant.v1.Signal signal = 2;
+     */
+    signal: Signal;
+};
+/**
+ * Describes the message sealant.v1.SignalSessionArgs.
+ * Use `create(SignalSessionArgsSchema)` to create a new message.
+ */
+export declare const SignalSessionArgsSchema: GenMessage<SignalSessionArgs>;
+/**
+ * Point a bindable mount's path at a subdirectory of its root (see ADR-0014). An empty subpath
+ * unbinds. The root was mounted at workspace start; the path itself becomes a symlink.
+ *
+ * @generated from message sealant.v1.BindMountArgs
+ */
+export type BindMountArgs = Message<"sealant.v1.BindMountArgs"> & {
+    /**
+     * @generated from field: string mount_path = 1;
+     */
+    mountPath: string;
+    /**
+     * @generated from field: string subpath = 2;
+     */
+    subpath: string;
+};
+/**
+ * Describes the message sealant.v1.BindMountArgs.
+ * Use `create(BindMountArgsSchema)` to create a new message.
+ */
+export declare const BindMountArgsSchema: GenMessage<BindMountArgs>;
+/**
+ * @generated from message sealant.v1.CaptureNowArgs
+ */
+export type CaptureNowArgs = Message<"sealant.v1.CaptureNowArgs"> & {
+    /**
+     * @generated from field: sealant.v1.CaptureKind kind = 1;
+     */
+    kind: CaptureKind;
+};
+/**
+ * Describes the message sealant.v1.CaptureNowArgs.
+ * Use `create(CaptureNowArgsSchema)` to create a new message.
+ */
+export declare const CaptureNowArgsSchema: GenMessage<CaptureNowArgs>;
+/**
+ * @generated from message sealant.v1.CaptureFlushArgs
+ */
+export type CaptureFlushArgs = Message<"sealant.v1.CaptureFlushArgs"> & {
+    /**
+     * @generated from field: sealant.v1.CaptureFlushKind kind = 1;
+     */
+    kind: CaptureFlushKind;
+    /**
+     * How long the flush may take, milliseconds. Honoured as given (never clamped to the shutdown
+     * grace). Absent: a suspend flush is bounded by the daemon's shutdown grace, as before; a final
+     * flush has no deadline and returns when it is complete, or when it can never be (a fence, a
+     * conflict, a failed snap).
+     *
+     * @generated from field: optional uint64 deadline_ms = 2;
+     */
+    deadlineMs?: bigint | undefined;
+    /**
+     * Final only: how long managed processes get after SIGTERM before SIGKILL, milliseconds.
+     * Absent: the daemon's shutdown grace. Counted inside `deadline_ms`.
+     *
+     * @generated from field: optional uint64 grace_ms = 3;
+     */
+    graceMs?: bigint | undefined;
+};
+/**
+ * Describes the message sealant.v1.CaptureFlushArgs.
+ * Use `create(CaptureFlushArgsSchema)` to create a new message.
+ */
+export declare const CaptureFlushArgsSchema: GenMessage<CaptureFlushArgs>;
+/**
+ * @generated from message sealant.v1.ReadSessionOutputArgs
+ */
+export type ReadSessionOutputArgs = Message<"sealant.v1.ReadSessionOutputArgs"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: uint64 from_sequence = 2;
+     */
+    fromSequence: bigint;
+    /**
+     * Cap on returned payload bytes (defaulted/clamped by the daemon).
+     *
+     * @generated from field: optional uint64 max_bytes = 3;
+     */
+    maxBytes?: bigint | undefined;
+};
+/**
+ * Describes the message sealant.v1.ReadSessionOutputArgs.
+ * Use `create(ReadSessionOutputArgsSchema)` to create a new message.
+ */
+export declare const ReadSessionOutputArgsSchema: GenMessage<ReadSessionOutputArgs>;
+/**
+ * @generated from message sealant.v1.DetachSessionArgs
+ */
+export type DetachSessionArgs = Message<"sealant.v1.DetachSessionArgs"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.DetachSessionArgs.
+ * Use `create(DetachSessionArgsSchema)` to create a new message.
+ */
+export declare const DetachSessionArgsSchema: GenMessage<DetachSessionArgs>;
+/**
+ * @generated from message sealant.v1.OpenForwardArgs
+ */
+export type OpenForwardArgs = Message<"sealant.v1.OpenForwardArgs"> & {
+    /**
+     * @generated from field: string host = 1;
+     */
+    host: string;
+    /**
+     * @generated from field: uint32 port = 2;
+     */
+    port: number;
+    /**
+     * @generated from field: optional string execution_id = 3;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string protocol = 4;
+     */
+    protocol?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.OpenForwardArgs.
+ * Use `create(OpenForwardArgsSchema)` to create a new message.
+ */
+export declare const OpenForwardArgsSchema: GenMessage<OpenForwardArgs>;
+/**
+ * @generated from message sealant.v1.CloseForwardArgs
+ */
+export type CloseForwardArgs = Message<"sealant.v1.CloseForwardArgs"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.CloseForwardArgs.
+ * Use `create(CloseForwardArgsSchema)` to create a new message.
+ */
+export declare const CloseForwardArgsSchema: GenMessage<CloseForwardArgs>;
+/**
+ * @generated from message sealant.v1.OpenSftpArgs
+ */
+export type OpenSftpArgs = Message<"sealant.v1.OpenSftpArgs"> & {
+    /**
+     * @generated from field: optional string execution_id = 1;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string cwd = 2;
+     */
+    cwd?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.OpenSftpArgs.
+ * Use `create(OpenSftpArgsSchema)` to create a new message.
+ */
+export declare const OpenSftpArgsSchema: GenMessage<OpenSftpArgs>;
+/**
+ * @generated from message sealant.v1.CloseSftpArgs
+ */
+export type CloseSftpArgs = Message<"sealant.v1.CloseSftpArgs"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.CloseSftpArgs.
+ * Use `create(CloseSftpArgsSchema)` to create a new message.
+ */
+export declare const CloseSftpArgsSchema: GenMessage<CloseSftpArgs>;
+/**
+ * @generated from message sealant.v1.Command
+ */
+export type Command = Message<"sealant.v1.Command"> & {
+    /**
+     * @generated from oneof sealant.v1.Command.command
+     */
+    command: {
+        /**
+         * @generated from field: sealant.v1.Empty runtime_health = 1;
+         */
+        value: Empty;
+        case: "runtimeHealth";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty runtime_get_capabilities = 2;
+         */
+        value: Empty;
+        case: "runtimeGetCapabilities";
+    } | {
+        /**
+         * @generated from field: sealant.v1.RuntimeGracefulShutdownArgs runtime_graceful_shutdown = 3;
+         */
+        value: RuntimeGracefulShutdownArgs;
+        case: "runtimeGracefulShutdown";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty runtime_kill = 4;
+         */
+        value: Empty;
+        case: "runtimeKill";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ExecutionStartArgs execution_start = 5;
+         */
+        value: ExecutionStartArgs;
+        case: "executionStart";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ExecutionStopArgs execution_stop = 6;
+         */
+        value: ExecutionStopArgs;
+        case: "executionStop";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ExecArgs exec = 7;
+         */
+        value: ExecArgs;
+        case: "exec";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SignalProcessArgs signal_process = 8;
+         */
+        value: SignalProcessArgs;
+        case: "signalProcess";
+    } | {
+        /**
+         * @generated from field: sealant.v1.KillProcessArgs kill_process = 9;
+         */
+        value: KillProcessArgs;
+        case: "killProcess";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ListProcessesArgs list_processes = 10;
+         */
+        value: ListProcessesArgs;
+        case: "listProcesses";
+    } | {
+        /**
+         * @generated from field: sealant.v1.WriteStdinArgs write_stdin = 11;
+         */
+        value: WriteStdinArgs;
+        case: "writeStdin";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CloseStdinArgs close_stdin = 12;
+         */
+        value: CloseStdinArgs;
+        case: "closeStdin";
+    } | {
+        /**
+         * @generated from field: sealant.v1.OpenSessionArgs open_session = 13;
+         */
+        value: OpenSessionArgs;
+        case: "openSession";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CloseSessionArgs close_session = 14;
+         */
+        value: CloseSessionArgs;
+        case: "closeSession";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ResizePtyArgs resize_pty = 15;
+         */
+        value: ResizePtyArgs;
+        case: "resizePty";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty list_sessions = 16;
+         */
+        value: Empty;
+        case: "listSessions";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SetFeatureStateArgs set_feature_state = 17;
+         */
+        value: SetFeatureStateArgs;
+        case: "setFeatureState";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty get_runtime_metrics = 18;
+         */
+        value: Empty;
+        case: "getRuntimeMetrics";
+    } | {
+        /**
+         * @generated from field: sealant.v1.AttachSessionArgs attach_session = 19;
+         */
+        value: AttachSessionArgs;
+        case: "attachSession";
+    } | {
+        /**
+         * @generated from field: sealant.v1.DetachSessionArgs detach_session = 20;
+         */
+        value: DetachSessionArgs;
+        case: "detachSession";
+    } | {
+        /**
+         * @generated from field: sealant.v1.OpenForwardArgs open_forward = 21;
+         */
+        value: OpenForwardArgs;
+        case: "openForward";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CloseForwardArgs close_forward = 22;
+         */
+        value: CloseForwardArgs;
+        case: "closeForward";
+    } | {
+        /**
+         * @generated from field: sealant.v1.OpenSftpArgs open_sftp = 23;
+         */
+        value: OpenSftpArgs;
+        case: "openSftp";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CloseSftpArgs close_sftp = 24;
+         */
+        value: CloseSftpArgs;
+        case: "closeSftp";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SignalSessionArgs signal_session = 25;
+         */
+        value: SignalSessionArgs;
+        case: "signalSession";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ReadSessionOutputArgs read_session_output = 26;
+         */
+        value: ReadSessionOutputArgs;
+        case: "readSessionOutput";
+    } | {
+        /**
+         * @generated from field: sealant.v1.BindMountArgs bind_mount = 27;
+         */
+        value: BindMountArgs;
+        case: "bindMount";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CaptureNowArgs capture_now = 28;
+         */
+        value: CaptureNowArgs;
+        case: "captureNow";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CaptureFlushArgs capture_flush = 29;
+         */
+        value: CaptureFlushArgs;
+        case: "captureFlush";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty capture_status = 30;
+         */
+        value: Empty;
+        case: "captureStatus";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty lease_epoch = 31;
+         */
+        value: Empty;
+        case: "leaseEpoch";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty capture_replan = 32;
+         */
+        value: Empty;
+        case: "captureReplan";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.Command.
+ * Use `create(CommandSchema)` to create a new message.
+ */
+export declare const CommandSchema: GenMessage<Command>;
+/**
+ * @generated from message sealant.v1.Capabilities
+ */
+export type Capabilities = Message<"sealant.v1.Capabilities"> & {
+    /**
+     * @generated from field: uint32 schema_version = 1;
+     */
+    schemaVersion: number;
+    /**
+     * @generated from field: string runtime_id = 2;
+     */
+    runtimeId: string;
+    /**
+     * @generated from field: optional string workspace_id = 3;
+     */
+    workspaceId?: string | undefined;
+    /**
+     * @generated from field: string os = 4;
+     */
+    os: string;
+    /**
+     * @generated from field: string arch = 5;
+     */
+    arch: string;
+    /**
+     * @generated from field: string daemon_version = 6;
+     */
+    daemonVersion: string;
+    /**
+     * @generated from field: sealant.v1.FeatureMatrix features = 7;
+     */
+    features?: FeatureMatrix | undefined;
+    /**
+     * @generated from field: sealant.v1.Limits limits = 8;
+     */
+    limits?: Limits | undefined;
+};
+/**
+ * Describes the message sealant.v1.Capabilities.
+ * Use `create(CapabilitiesSchema)` to create a new message.
+ */
+export declare const CapabilitiesSchema: GenMessage<Capabilities>;
+/**
+ * @generated from message sealant.v1.HealthReport
+ */
+export type HealthReport = Message<"sealant.v1.HealthReport"> & {
+    /**
+     * @generated from field: sealant.v1.RuntimeState state = 1;
+     */
+    state: RuntimeState;
+    /**
+     * @generated from field: string runtime_id = 2;
+     */
+    runtimeId: string;
+    /**
+     * @generated from field: uint64 uptime_millis = 3;
+     */
+    uptimeMillis: bigint;
+    /**
+     * @generated from field: uint32 active_executions = 4;
+     */
+    activeExecutions: number;
+    /**
+     * @generated from field: uint32 active_sessions = 5;
+     */
+    activeSessions: number;
+    /**
+     * @generated from field: uint32 active_processes = 6;
+     */
+    activeProcesses: number;
+    /**
+     * @generated from field: uint64 queue_depth = 7;
+     */
+    queueDepth: bigint;
+    /**
+     * @generated from field: uint64 queue_capacity = 8;
+     */
+    queueCapacity: bigint;
+    /**
+     * @generated from field: uint64 spool_bytes = 9;
+     */
+    spoolBytes: bigint;
+    /**
+     * @generated from field: uint64 spool_limit_bytes = 10;
+     */
+    spoolLimitBytes: bigint;
+    /**
+     * @generated from field: uint64 retry_count = 11;
+     */
+    retryCount: bigint;
+    /**
+     * @generated from field: optional int64 last_delivery_at = 12;
+     */
+    lastDeliveryAt?: bigint | undefined;
+    /**
+     * @generated from field: uint64 dropped_events = 13;
+     */
+    droppedEvents: bigint;
+    /**
+     * @generated from field: uint64 redacted_events = 14;
+     */
+    redactedEvents: bigint;
+    /**
+     * @generated from field: uint64 coalesced_events = 15;
+     */
+    coalescedEvents: bigint;
+    /**
+     * @generated from field: uint64 truncated_events = 16;
+     */
+    truncatedEvents: bigint;
+    /**
+     * @generated from field: bool sink_connected = 17;
+     */
+    sinkConnected: boolean;
+    /**
+     * @generated from field: repeated sealant.v1.FeatureState feature_states = 18;
+     */
+    featureStates: FeatureState[];
+    /**
+     * @generated from field: repeated string degradation_reasons = 19;
+     */
+    degradationReasons: string[];
+};
+/**
+ * Describes the message sealant.v1.HealthReport.
+ * Use `create(HealthReportSchema)` to create a new message.
+ */
+export declare const HealthReportSchema: GenMessage<HealthReport>;
+/**
+ * @generated from message sealant.v1.ExecAccepted
+ */
+export type ExecAccepted = Message<"sealant.v1.ExecAccepted"> & {
+    /**
+     * @generated from field: string process_id = 1;
+     */
+    processId: string;
+    /**
+     * @generated from field: int32 pid = 2;
+     */
+    pid: number;
+    /**
+     * @generated from field: int32 pgid = 3;
+     */
+    pgid: number;
+    /**
+     * @generated from field: bool pidfd = 4;
+     */
+    pidfd: boolean;
+};
+/**
+ * Describes the message sealant.v1.ExecAccepted.
+ * Use `create(ExecAcceptedSchema)` to create a new message.
+ */
+export declare const ExecAcceptedSchema: GenMessage<ExecAccepted>;
+/**
+ * @generated from message sealant.v1.SessionOpened
+ */
+export type SessionOpened = Message<"sealant.v1.SessionOpened"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: string process_id = 2;
+     */
+    processId: string;
+    /**
+     * @generated from field: int32 pid = 3;
+     */
+    pid: number;
+};
+/**
+ * Describes the message sealant.v1.SessionOpened.
+ * Use `create(SessionOpenedSchema)` to create a new message.
+ */
+export declare const SessionOpenedSchema: GenMessage<SessionOpened>;
+/**
+ * @generated from message sealant.v1.ProcessSummary
+ */
+export type ProcessSummary = Message<"sealant.v1.ProcessSummary"> & {
+    /**
+     * @generated from field: string process_id = 1;
+     */
+    processId: string;
+    /**
+     * @generated from field: int32 pid = 2;
+     */
+    pid: number;
+    /**
+     * @generated from field: int32 pgid = 3;
+     */
+    pgid: number;
+    /**
+     * @generated from field: sealant.v1.ProcessState state = 4;
+     */
+    state: ProcessState;
+    /**
+     * @generated from field: string executable = 5;
+     */
+    executable: string;
+    /**
+     * @generated from field: optional string execution_id = 6;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: optional string session_id = 7;
+     */
+    sessionId?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.ProcessSummary.
+ * Use `create(ProcessSummarySchema)` to create a new message.
+ */
+export declare const ProcessSummarySchema: GenMessage<ProcessSummary>;
+/**
+ * @generated from message sealant.v1.ProcessList
+ */
+export type ProcessList = Message<"sealant.v1.ProcessList"> & {
+    /**
+     * @generated from field: repeated sealant.v1.ProcessSummary processes = 1;
+     */
+    processes: ProcessSummary[];
+};
+/**
+ * Describes the message sealant.v1.ProcessList.
+ * Use `create(ProcessListSchema)` to create a new message.
+ */
+export declare const ProcessListSchema: GenMessage<ProcessList>;
+/**
+ * @generated from message sealant.v1.SessionSummary
+ */
+export type SessionSummary = Message<"sealant.v1.SessionSummary"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: string process_id = 2;
+     */
+    processId: string;
+    /**
+     * @generated from field: int32 pid = 3;
+     */
+    pid: number;
+    /**
+     * @generated from field: uint32 cols = 4;
+     */
+    cols: number;
+    /**
+     * @generated from field: uint32 rows = 5;
+     */
+    rows: number;
+    /**
+     * @generated from field: optional string execution_id = 6;
+     */
+    executionId?: string | undefined;
+    /**
+     * @generated from field: sealant.v1.SessionState state = 7;
+     */
+    state: SessionState;
+    /**
+     * @generated from field: optional int32 exit_code = 8;
+     */
+    exitCode?: number | undefined;
+    /**
+     * @generated from field: optional int32 signal = 9;
+     */
+    signal?: number | undefined;
+    /**
+     * @generated from field: int64 started_at_micros = 10;
+     */
+    startedAtMicros: bigint;
+    /**
+     * Journal cursor bounds: the first still-retained output sequence and the next to be assigned.
+     *
+     * @generated from field: uint64 first_journal_sequence = 11;
+     */
+    firstJournalSequence: bigint;
+    /**
+     * @generated from field: uint64 next_journal_sequence = 12;
+     */
+    nextJournalSequence: bigint;
+    /**
+     * PTY unless the session was opened in pipe mode (unspecified reads as PTY).
+     *
+     * @generated from field: sealant.v1.SessionMode mode = 13;
+     */
+    mode: SessionMode;
+};
+/**
+ * Describes the message sealant.v1.SessionSummary.
+ * Use `create(SessionSummarySchema)` to create a new message.
+ */
+export declare const SessionSummarySchema: GenMessage<SessionSummary>;
+/**
+ * @generated from message sealant.v1.SessionList
+ */
+export type SessionList = Message<"sealant.v1.SessionList"> & {
+    /**
+     * @generated from field: repeated sealant.v1.SessionSummary sessions = 1;
+     */
+    sessions: SessionSummary[];
+};
+/**
+ * Describes the message sealant.v1.SessionList.
+ * Use `create(SessionListSchema)` to create a new message.
+ */
+export declare const SessionListSchema: GenMessage<SessionList>;
+/**
+ * @generated from message sealant.v1.SessionOutputChunk
+ */
+export type SessionOutputChunk = Message<"sealant.v1.SessionOutputChunk"> & {
+    /**
+     * @generated from field: uint64 sequence = 1;
+     */
+    sequence: bigint;
+    /**
+     * @generated from field: bytes data = 2;
+     */
+    data: Uint8Array;
+};
+/**
+ * Describes the message sealant.v1.SessionOutputChunk.
+ * Use `create(SessionOutputChunkSchema)` to create a new message.
+ */
+export declare const SessionOutputChunkSchema: GenMessage<SessionOutputChunk>;
+/**
+ * @generated from message sealant.v1.SessionOutput
+ */
+export type SessionOutput = Message<"sealant.v1.SessionOutput"> & {
+    /**
+     * @generated from field: string session_id = 1;
+     */
+    sessionId: string;
+    /**
+     * @generated from field: repeated sealant.v1.SessionOutputChunk chunks = 2;
+     */
+    chunks: SessionOutputChunk[];
+    /**
+     * Cursor to pass as the next from_sequence (chunks were [from, next)).
+     *
+     * @generated from field: uint64 next_sequence = 3;
+     */
+    nextSequence: bigint;
+    /**
+     * First sequence still retained in the journal (requests below this are clamped up to it).
+     *
+     * @generated from field: uint64 first_available_sequence = 4;
+     */
+    firstAvailableSequence: bigint;
+    /**
+     * @generated from field: sealant.v1.SessionState state = 5;
+     */
+    state: SessionState;
+    /**
+     * @generated from field: optional int32 exit_code = 6;
+     */
+    exitCode?: number | undefined;
+    /**
+     * @generated from field: optional int32 signal = 7;
+     */
+    signal?: number | undefined;
+};
+/**
+ * Describes the message sealant.v1.SessionOutput.
+ * Use `create(SessionOutputSchema)` to create a new message.
+ */
+export declare const SessionOutputSchema: GenMessage<SessionOutput>;
+/**
+ * @generated from message sealant.v1.RuntimeMetrics
+ */
+export type RuntimeMetrics = Message<"sealant.v1.RuntimeMetrics"> & {
+    /**
+     * @generated from field: uint64 uptime_millis = 1;
+     */
+    uptimeMillis: bigint;
+    /**
+     * @generated from field: uint64 events_emitted = 2;
+     */
+    eventsEmitted: bigint;
+    /**
+     * @generated from field: uint64 events_delivered = 3;
+     */
+    eventsDelivered: bigint;
+    /**
+     * @generated from field: uint64 dropped_events = 4;
+     */
+    droppedEvents: bigint;
+    /**
+     * @generated from field: uint64 queue_depth = 5;
+     */
+    queueDepth: bigint;
+    /**
+     * @generated from field: uint64 spool_bytes = 6;
+     */
+    spoolBytes: bigint;
+    /**
+     * @generated from field: uint32 active_processes = 7;
+     */
+    activeProcesses: number;
+    /**
+     * @generated from field: uint32 active_sessions = 8;
+     */
+    activeSessions: number;
+};
+/**
+ * Describes the message sealant.v1.RuntimeMetrics.
+ * Use `create(RuntimeMetricsSchema)` to create a new message.
+ */
+export declare const RuntimeMetricsSchema: GenMessage<RuntimeMetrics>;
+/**
+ * @generated from message sealant.v1.ShutdownAccepted
+ */
+export type ShutdownAccepted = Message<"sealant.v1.ShutdownAccepted"> & {
+    /**
+     * @generated from field: uint64 grace_millis = 1;
+     */
+    graceMillis: bigint;
+};
+/**
+ * Describes the message sealant.v1.ShutdownAccepted.
+ * Use `create(ShutdownAcceptedSchema)` to create a new message.
+ */
+export declare const ShutdownAcceptedSchema: GenMessage<ShutdownAccepted>;
+/**
+ * @generated from message sealant.v1.StreamAttached
+ */
+export type StreamAttached = Message<"sealant.v1.StreamAttached"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.StreamAttached.
+ * Use `create(StreamAttachedSchema)` to create a new message.
+ */
+export declare const StreamAttachedSchema: GenMessage<StreamAttached>;
+/**
+ * @generated from message sealant.v1.ForwardOpened
+ */
+export type ForwardOpened = Message<"sealant.v1.ForwardOpened"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.ForwardOpened.
+ * Use `create(ForwardOpenedSchema)` to create a new message.
+ */
+export declare const ForwardOpenedSchema: GenMessage<ForwardOpened>;
+/**
+ * @generated from message sealant.v1.SftpOpened
+ */
+export type SftpOpened = Message<"sealant.v1.SftpOpened"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.SftpOpened.
+ * Use `create(SftpOpenedSchema)` to create a new message.
+ */
+export declare const SftpOpenedSchema: GenMessage<SftpOpened>;
+/**
+ * @generated from message sealant.v1.ProcessAttached
+ */
+export type ProcessAttached = Message<"sealant.v1.ProcessAttached"> & {
+    /**
+     * @generated from field: string process_id = 1;
+     */
+    processId: string;
+    /**
+     * @generated from field: int32 pid = 2;
+     */
+    pid: number;
+    /**
+     * @generated from field: int32 pgid = 3;
+     */
+    pgid: number;
+    /**
+     * @generated from field: string channel_id = 4;
+     */
+    channelId: string;
+};
+/**
+ * Describes the message sealant.v1.ProcessAttached.
+ * Use `create(ProcessAttachedSchema)` to create a new message.
+ */
+export declare const ProcessAttachedSchema: GenMessage<ProcessAttached>;
+/**
+ * @generated from message sealant.v1.CaptureStaged
+ */
+export type CaptureStaged = Message<"sealant.v1.CaptureStaged"> & {
+    /**
+     * @generated from field: uint64 n = 1;
+     */
+    n: bigint;
+    /**
+     * @generated from field: string capture_id = 2;
+     */
+    captureId: string;
+    /**
+     * @generated from field: sealant.v1.CaptureKind kind = 3;
+     */
+    kind: CaptureKind;
+    /**
+     * @generated from field: bool unchanged = 4;
+     */
+    unchanged: boolean;
+};
+/**
+ * Describes the message sealant.v1.CaptureStaged.
+ * Use `create(CaptureStagedSchema)` to create a new message.
+ */
+export declare const CaptureStagedSchema: GenMessage<CaptureStaged>;
+/**
+ * One class's snaps (`CaptureStatusReport.snaps`). A snap that fails for any reason, scheduled or
+ * forced, is counted here and its error kept until one succeeds.
+ *
+ * @generated from message sealant.v1.CaptureClassSnaps
+ */
+export type CaptureClassSnaps = Message<"sealant.v1.CaptureClassSnaps"> & {
+    /**
+     * @generated from field: sealant.v1.CaptureClass class = 1;
+     */
+    class: CaptureClass;
+    /**
+     * Snaps of this class that failed since the daemon started.
+     *
+     * @generated from field: uint64 snaps_failed = 2;
+     */
+    snapsFailed: bigint;
+    /**
+     * The last snap's error, while the last snap failed; absent once one succeeds.
+     *
+     * @generated from field: optional string last_snap_error = 3;
+     */
+    lastSnapError?: string | undefined;
+    /**
+     * When the current run of failed snaps began (Unix ms), while the last snap failed.
+     *
+     * @generated from field: optional uint64 snap_failing_since_unix_ms = 4;
+     */
+    snapFailingSinceUnixMs?: bigint | undefined;
+};
+/**
+ * Describes the message sealant.v1.CaptureClassSnaps.
+ * Use `create(CaptureClassSnapsSchema)` to create a new message.
+ */
+export declare const CaptureClassSnapsSchema: GenMessage<CaptureClassSnaps>;
+/**
+ * @generated from message sealant.v1.CaptureStatusReport
+ */
+export type CaptureStatusReport = Message<"sealant.v1.CaptureStatusReport"> & {
+    /**
+     * @generated from field: uint64 epoch = 1;
+     */
+    epoch: bigint;
+    /**
+     * @generated from field: string worktree_id = 2;
+     */
+    worktreeId: string;
+    /**
+     * @generated from field: optional uint64 head_n = 3;
+     */
+    headN?: bigint | undefined;
+    /**
+     * @generated from field: uint64 pending = 4;
+     */
+    pending: bigint;
+    /**
+     * @generated from field: uint64 staged_bytes = 5;
+     */
+    stagedBytes: bigint;
+    /**
+     * @generated from field: uint64 uploaded_objects = 6;
+     */
+    uploadedObjects: bigint;
+    /**
+     * @generated from field: uint64 uploaded_bytes = 7;
+     */
+    uploadedBytes: bigint;
+    /**
+     * @generated from field: uint64 registered = 8;
+     */
+    registered: bigint;
+    /**
+     * @generated from field: bool fenced = 9;
+     */
+    fenced: boolean;
+    /**
+     * @generated from field: bool paused = 10;
+     */
+    paused: boolean;
+    /**
+     * @generated from field: optional uint64 last_snap_unix_ms = 11;
+     */
+    lastSnapUnixMs?: bigint | undefined;
+    /**
+     * Classes with a capture the registrar refused for the session's byte quota. Nothing is
+     * dropped: the capture stays queued (counted in `pending`) with its staged bytes, the class
+     * keeps snapping, and the executor asks again after a backoff until the budget allows.
+     *
+     * @generated from field: repeated sealant.v1.CaptureClass refused = 12;
+     */
+    refused: CaptureClass[];
+    /**
+     * Of `pending`, the bulk captures (dependency trees, build outputs) whose objects are still
+     * uploading. A suspend capture.flush returns once every other capture is registered; these
+     * follow in the background and register after it. A final flush waits for them.
+     *
+     * @generated from field: uint64 pending_bulk = 13;
+     */
+    pendingBulk: bigint;
+    /**
+     * Bytes staged on this disk that no upload has taken yet, over every pending capture (an
+     * object two captures share is counted once). What is lost if the disk goes now; 0 once
+     * everything is up (captures can still wait to register).
+     *
+     * @generated from field: uint64 pending_bytes = 14;
+     */
+    pendingBytes: bigint;
+    /**
+     * True only when a final capture.flush ran to the end on this executor: admission closed,
+     * every managed process terminated and awaited, the small and the bulk class snapped after
+     * that, and everything registered (`pending` 0, not fenced). The only answer a control plane
+     * may read as "saved"; `pending == 0` alone is not. False from an older daemon.
+     *
+     * @generated from field: bool complete = 15;
+     */
+    complete: boolean;
+    /**
+     * Why `complete` is false: `not-final` (no final flush has run), `in-progress` (a final flush is
+     * running: stopping the writers, snapping, shipping), `processes-remain` (a process
+     * or a container of the workspace's Docker daemon outlived SIGKILL, or that daemon could not
+     * be reached), `sweep-unavailable` (the daemon cannot see every writer: not a child subreaper
+     * and not PID 1 of its PID namespace), `snapshot-failed` (a final snap of either class failed),
+     * `unreadable` (a final snap met work it could not read),
+     * `fenced`, `conflict` (the chain moved under this executor), `deadline` (`deadline_ms`
+     * passed with captures pending), `ship-failed` (shipping kept failing until the deadline),
+     * `pending` (a capture was staged after the final flush), `internal` (the flush's task
+     * failed). A class whose last snap failed (`snaps`) is `snapshot-failed` too, whenever it
+     * failed. Absent when `complete`.
+     *
+     * @generated from field: optional string incomplete_reason = 16;
+     */
+    incompleteReason?: string | undefined;
+    /**
+     * Paths the last snap of each class could not read (listed, stat'ed or opened; a directory
+     * counts once), summed over both classes. Never taken as deleted: an automatic snap carries a
+     * path's last captured content forward, a final snap fails instead. Absent from an older daemon.
+     *
+     * @generated from field: optional uint64 unreadable = 17;
+     */
+    unreadable?: bigint | undefined;
+    /**
+     * Of `unreadable`, the paths whose last captured content was carried forward.
+     *
+     * @generated from field: optional uint64 carried = 18;
+     */
+    carried?: bigint | undefined;
+    /**
+     * The first 20 unreadable paths, virtual (`tree/<path>` under the worktree, `.git/<path>`,
+     * `harness/<path>`), small class first.
+     *
+     * @generated from field: repeated string unreadable_paths = 19;
+     */
+    unreadablePaths: string[];
+    /**
+     * A capture the registrar refused to register (422 on `capture.register`) that the executor is
+     * working through: `missing-objects` (an object it names is not in the store) or
+     * `unrestorable` (a section's tree would not restore). Never dropped: the objects it staged
+     * are uploaded again, then it is rebuilt from disk in its place. Absent when none is refused.
+     *
+     * @generated from field: optional string register_refused = 20;
+     */
+    registerRefused?: string | undefined;
+    /**
+     * That capture's chain position.
+     *
+     * @generated from field: optional uint64 register_refused_n = 21;
+     */
+    registerRefusedN?: bigint | undefined;
+    /**
+     * The first 20 keys the registrar named as missing.
+     *
+     * @generated from field: repeated string register_missing = 22;
+     */
+    registerMissing: string[];
+    /**
+     * Register refusals this daemon has seen since it started. Absent from an older daemon.
+     *
+     * @generated from field: optional uint64 register_refusals = 23;
+     */
+    registerRefusals?: bigint | undefined;
+    /**
+     * The refused capture waits to be rebuilt from disk; nothing behind it registers first.
+     *
+     * @generated from field: bool repairing = 24;
+     */
+    repairing: boolean;
+    /**
+     * A bulk build is in progress (reading the dependency trees, or paused mid-way for a small
+     * capture): its capture is not queued yet, so `pending` and `pending_bulk` do not count it, but
+     * `pending_bytes` counts what it has staged so far. A drain is not done while this is true.
+     *
+     * @generated from field: bool bulk_building = 25;
+     */
+    bulkBuilding: boolean;
+    /**
+     * Each captured class's snaps: how many failed, and the last one's error while it fails (a
+     * snap that fails stages nothing: what changed since the last capture is on this disk only).
+     * `complete` is false while any class's last snap failed. Absent from an older daemon.
+     *
+     * @generated from field: repeated sealant.v1.CaptureClassSnaps snaps = 26;
+     */
+    snaps: CaptureClassSnaps[];
+    /**
+     * Where this answer stands in the executor's own order (cross-repo decision 17). Control
+     * planes order and supersede capture evidence by it, never by their own wall clocks. The
+     * position is (epoch, launch, boot_id, boot_generation, observation), with `head_n` beside it.
+     * `launch` is the executor `plan.get` named (the launch the session token was issued for),
+     * absent when the plan named none: answers of different epochs or launches are different
+     * executors' and are never ordered against each other. `boot_id` is random per daemon
+     * process. `boot_generation` counts the daemon processes that opened this disk's staging
+     * directory, this one included (persisted and fsynced there before the first answer): a
+     * recovery boot of the same disk has a higher one; 0 when it could not be persisted.
+     * `observation` is strictly increasing within one boot over every answer and every final seal
+     * (the seal's manifest carries its own); an answer's content is computed under the number it
+     * takes, so a higher number never describes an older state.
+     *
+     * Same (epoch, launch, boot_id): order by `observation`. Same (epoch, launch), different boot
+     * ids, both generations above 0 and different: order by (boot_generation, observation).
+     * Anything else (a field absent from an older daemon, a generation of 0, two boot ids under
+     * one generation) is incomparable, and incomparable or contradictory evidence fails closed:
+     * no deletion, no "saved".
+     *
+     * @generated from field: optional string launch = 27;
+     */
+    launch?: string | undefined;
+    /**
+     * @generated from field: optional string boot_id = 28;
+     */
+    bootId?: string | undefined;
+    /**
+     * @generated from field: optional uint64 boot_generation = 29;
+     */
+    bootGeneration?: bigint | undefined;
+    /**
+     * @generated from field: optional uint64 observation = 30;
+     */
+    observation?: bigint | undefined;
+    /**
+     * A capture step that has been running longer than it is expected to take at most, while it
+     * runs: a snap, or a `git` a snap waits on (Docker end to end, round 8: a snap waited on a
+     * `git cat-file` for 17 minutes, and every answer read like an idle, healthy capture). An
+     * observation, not a failure: the step may still finish. A `git` of a snap is killed at its
+     * own limit, and the snap fails (`snaps`) and is taken again. Of several, the innermost.
+     * Absent while nothing is past its bound, and from an older daemon.
+     *
+     * @generated from field: sealant.v1.CaptureOverdue overdue = 31;
+     */
+    overdue?: CaptureOverdue | undefined;
+};
+/**
+ * Describes the message sealant.v1.CaptureStatusReport.
+ * Use `create(CaptureStatusReportSchema)` to create a new message.
+ */
+export declare const CaptureStatusReportSchema: GenMessage<CaptureStatusReport>;
+/**
+ * A capture step past its bound (`CaptureStatusReport.overdue`).
+ *
+ * @generated from message sealant.v1.CaptureOverdue
+ */
+export type CaptureOverdue = Message<"sealant.v1.CaptureOverdue"> & {
+    /**
+     * What is running, outermost first, `›`-separated: `small snap › git cat-file --batch-check`.
+     *
+     * @generated from field: string step = 1;
+     */
+    step: string;
+    /**
+     * When it started, Unix milliseconds (display only: order evidence by `observation`).
+     *
+     * @generated from field: uint64 started_unix_ms = 2;
+     */
+    startedUnixMs: bigint;
+    /**
+     * How long it has been running when the answer was computed, milliseconds.
+     *
+     * @generated from field: uint64 running_ms = 3;
+     */
+    runningMs: bigint;
+    /**
+     * How long it is expected to take at most, milliseconds.
+     *
+     * @generated from field: uint64 bound_ms = 4;
+     */
+    boundMs: bigint;
+};
+/**
+ * Describes the message sealant.v1.CaptureOverdue.
+ * Use `create(CaptureOverdueSchema)` to create a new message.
+ */
+export declare const CaptureOverdueSchema: GenMessage<CaptureOverdue>;
+/**
+ * @generated from message sealant.v1.LeaseEpochReport
+ */
+export type LeaseEpochReport = Message<"sealant.v1.LeaseEpochReport"> & {
+    /**
+     * @generated from field: uint64 epoch = 1;
+     */
+    epoch: bigint;
+    /**
+     * @generated from field: string worktree_id = 2;
+     */
+    worktreeId: string;
+    /**
+     * @generated from field: bool fenced = 3;
+     */
+    fenced: boolean;
+};
+/**
+ * Describes the message sealant.v1.LeaseEpochReport.
+ * Use `create(LeaseEpochReportSchema)` to create a new message.
+ */
+export declare const LeaseEpochReportSchema: GenMessage<LeaseEpochReport>;
+/**
+ * @generated from message sealant.v1.CaptureReplanned
+ */
+export type CaptureReplanned = Message<"sealant.v1.CaptureReplanned"> & {
+    /**
+     * @generated from field: string worktree_id = 1;
+     */
+    worktreeId: string;
+    /**
+     * @generated from field: uint64 epoch = 2;
+     */
+    epoch: bigint;
+    /**
+     * @generated from field: optional uint64 head_n = 3;
+     */
+    headN?: bigint | undefined;
+    /**
+     * @generated from field: optional string head_capture_id = 4;
+     */
+    headCaptureId?: string | undefined;
+    /**
+     * @generated from field: uint64 files_written = 5;
+     */
+    filesWritten: bigint;
+    /**
+     * @generated from field: uint64 bytes_written = 6;
+     */
+    bytesWritten: bigint;
+    /**
+     * @generated from field: uint64 files_skipped = 7;
+     */
+    filesSkipped: bigint;
+    /**
+     * @generated from field: uint64 bytes_skipped = 8;
+     */
+    bytesSkipped: bigint;
+    /**
+     * @generated from field: uint64 removed = 9;
+     */
+    removed: bigint;
+    /**
+     * @generated from field: bool unchanged = 10;
+     */
+    unchanged: boolean;
+};
+/**
+ * Describes the message sealant.v1.CaptureReplanned.
+ * Use `create(CaptureReplannedSchema)` to create a new message.
+ */
+export declare const CaptureReplannedSchema: GenMessage<CaptureReplanned>;
+/**
+ * @generated from message sealant.v1.CommandResult
+ */
+export type CommandResult = Message<"sealant.v1.CommandResult"> & {
+    /**
+     * @generated from oneof sealant.v1.CommandResult.result
+     */
+    result: {
+        /**
+         * @generated from field: sealant.v1.HealthReport health = 1;
+         */
+        value: HealthReport;
+        case: "health";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Capabilities capabilities = 2;
+         */
+        value: Capabilities;
+        case: "capabilities";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ExecAccepted exec_accepted = 3;
+         */
+        value: ExecAccepted;
+        case: "execAccepted";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SessionOpened session_opened = 4;
+         */
+        value: SessionOpened;
+        case: "sessionOpened";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ProcessList process_list = 5;
+         */
+        value: ProcessList;
+        case: "processList";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SessionList session_list = 6;
+         */
+        value: SessionList;
+        case: "sessionList";
+    } | {
+        /**
+         * @generated from field: sealant.v1.RuntimeMetrics metrics = 7;
+         */
+        value: RuntimeMetrics;
+        case: "metrics";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ShutdownAccepted shutdown_accepted = 8;
+         */
+        value: ShutdownAccepted;
+        case: "shutdownAccepted";
+    } | {
+        /**
+         * @generated from field: sealant.v1.Empty accepted = 9;
+         */
+        value: Empty;
+        case: "accepted";
+    } | {
+        /**
+         * @generated from field: sealant.v1.StreamAttached stream_attached = 10;
+         */
+        value: StreamAttached;
+        case: "streamAttached";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ForwardOpened forward_opened = 11;
+         */
+        value: ForwardOpened;
+        case: "forwardOpened";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SftpOpened sftp_opened = 12;
+         */
+        value: SftpOpened;
+        case: "sftpOpened";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ProcessAttached process_attached = 13;
+         */
+        value: ProcessAttached;
+        case: "processAttached";
+    } | {
+        /**
+         * @generated from field: sealant.v1.SessionOutput session_output = 14;
+         */
+        value: SessionOutput;
+        case: "sessionOutput";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CaptureStaged capture_staged = 15;
+         */
+        value: CaptureStaged;
+        case: "captureStaged";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CaptureStatusReport capture_status = 16;
+         */
+        value: CaptureStatusReport;
+        case: "captureStatus";
+    } | {
+        /**
+         * @generated from field: sealant.v1.LeaseEpochReport lease_epoch = 17;
+         */
+        value: LeaseEpochReport;
+        case: "leaseEpoch";
+    } | {
+        /**
+         * @generated from field: sealant.v1.CaptureReplanned capture_replanned = 18;
+         */
+        value: CaptureReplanned;
+        case: "captureReplanned";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.CommandResult.
+ * Use `create(CommandResultSchema)` to create a new message.
+ */
+export declare const CommandResultSchema: GenMessage<CommandResult>;
+/**
+ * @generated from message sealant.v1.ControlError
+ */
+export type ControlError = Message<"sealant.v1.ControlError"> & {
+    /**
+     * @generated from field: sealant.v1.ControlErrorCode code = 1;
+     */
+    code: ControlErrorCode;
+    /**
+     * @generated from field: string message = 2;
+     */
+    message: string;
+    /**
+     * @generated from field: optional string detail_json = 3;
+     */
+    detailJson?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.ControlError.
+ * Use `create(ControlErrorSchema)` to create a new message.
+ */
+export declare const ControlErrorSchema: GenMessage<ControlError>;
+/**
+ * @generated from message sealant.v1.ControlRequest
+ */
+export type ControlRequest = Message<"sealant.v1.ControlRequest"> & {
+    /**
+     * @generated from field: uint32 schema_version = 1;
+     */
+    schemaVersion: number;
+    /**
+     * @generated from field: string request_id = 2;
+     */
+    requestId: string;
+    /**
+     * @generated from field: sealant.v1.Command command = 3;
+     */
+    command?: Command | undefined;
+};
+/**
+ * Describes the message sealant.v1.ControlRequest.
+ * Use `create(ControlRequestSchema)` to create a new message.
+ */
+export declare const ControlRequestSchema: GenMessage<ControlRequest>;
+/**
+ * @generated from message sealant.v1.ResponseOutcome
+ */
+export type ResponseOutcome = Message<"sealant.v1.ResponseOutcome"> & {
+    /**
+     * @generated from oneof sealant.v1.ResponseOutcome.outcome
+     */
+    outcome: {
+        /**
+         * present on success (may itself carry no data via Empty "accepted")
+         *
+         * @generated from field: sealant.v1.CommandResult ok = 1;
+         */
+        value: CommandResult;
+        case: "ok";
+    } | {
+        /**
+         * @generated from field: sealant.v1.ControlError error = 2;
+         */
+        value: ControlError;
+        case: "error";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.ResponseOutcome.
+ * Use `create(ResponseOutcomeSchema)` to create a new message.
+ */
+export declare const ResponseOutcomeSchema: GenMessage<ResponseOutcome>;
+/**
+ * @generated from message sealant.v1.ControlResponse
+ */
+export type ControlResponse = Message<"sealant.v1.ControlResponse"> & {
+    /**
+     * @generated from field: uint32 schema_version = 1;
+     */
+    schemaVersion: number;
+    /**
+     * @generated from field: string request_id = 2;
+     */
+    requestId: string;
+    /**
+     * @generated from field: sealant.v1.ResponseOutcome outcome = 3;
+     */
+    outcome?: ResponseOutcome | undefined;
+};
+/**
+ * Describes the message sealant.v1.ControlResponse.
+ * Use `create(ControlResponseSchema)` to create a new message.
+ */
+export declare const ControlResponseSchema: GenMessage<ControlResponse>;
+/**
+ * A reliable byte-conduit frame: raw bytes, a flow-control credit, or a close. Carried over the same
+ * length-prefixed stream as requests/responses/events, addressed by channel_id.
+ *
+ * @generated from message sealant.v1.StreamWindowUpdate
+ */
+export type StreamWindowUpdate = Message<"sealant.v1.StreamWindowUpdate"> & {
+    /**
+     * @generated from field: uint64 credits = 1;
+     */
+    credits: bigint;
+};
+/**
+ * Describes the message sealant.v1.StreamWindowUpdate.
+ * Use `create(StreamWindowUpdateSchema)` to create a new message.
+ */
+export declare const StreamWindowUpdateSchema: GenMessage<StreamWindowUpdate>;
+/**
+ * @generated from message sealant.v1.StreamEnd
+ */
+export type StreamEnd = Message<"sealant.v1.StreamEnd"> & {
+    /**
+     * @generated from field: optional int32 exit_code = 1;
+     */
+    exitCode?: number | undefined;
+    /**
+     * @generated from field: optional int32 signal = 2;
+     */
+    signal?: number | undefined;
+    /**
+     * @generated from field: optional string error = 3;
+     */
+    error?: string | undefined;
+};
+/**
+ * Describes the message sealant.v1.StreamEnd.
+ * Use `create(StreamEndSchema)` to create a new message.
+ */
+export declare const StreamEndSchema: GenMessage<StreamEnd>;
+/**
+ * @generated from message sealant.v1.StreamFrame
+ */
+export type StreamFrame = Message<"sealant.v1.StreamFrame"> & {
+    /**
+     * @generated from field: string channel_id = 1;
+     */
+    channelId: string;
+    /**
+     * @generated from field: uint64 seq = 2;
+     */
+    seq: bigint;
+    /**
+     * @generated from oneof sealant.v1.StreamFrame.payload
+     */
+    payload: {
+        /**
+         * @generated from field: bytes data = 3;
+         */
+        value: Uint8Array;
+        case: "data";
+    } | {
+        /**
+         * @generated from field: sealant.v1.StreamWindowUpdate window_update = 4;
+         */
+        value: StreamWindowUpdate;
+        case: "windowUpdate";
+    } | {
+        /**
+         * @generated from field: sealant.v1.StreamEnd end = 5;
+         */
+        value: StreamEnd;
+        case: "end";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.StreamFrame.
+ * Use `create(StreamFrameSchema)` to create a new message.
+ */
+export declare const StreamFrameSchema: GenMessage<StreamFrame>;
+/**
+ * @generated from message sealant.v1.ClientMessage
+ */
+export type ClientMessage = Message<"sealant.v1.ClientMessage"> & {
+    /**
+     * @generated from oneof sealant.v1.ClientMessage.message
+     */
+    message: {
+        /**
+         * @generated from field: sealant.v1.ControlRequest request = 1;
+         */
+        value: ControlRequest;
+        case: "request";
+    } | {
+        /**
+         * @generated from field: sealant.v1.StreamFrame stream = 2;
+         */
+        value: StreamFrame;
+        case: "stream";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.ClientMessage.
+ * Use `create(ClientMessageSchema)` to create a new message.
+ */
+export declare const ClientMessageSchema: GenMessage<ClientMessage>;
+/**
+ * @generated from message sealant.v1.ServerMessage
+ */
+export type ServerMessage = Message<"sealant.v1.ServerMessage"> & {
+    /**
+     * @generated from oneof sealant.v1.ServerMessage.message
+     */
+    message: {
+        /**
+         * @generated from field: sealant.v1.ControlResponse response = 1;
+         */
+        value: ControlResponse;
+        case: "response";
+    } | {
+        /**
+         * @generated from field: sealant.v1.EventEnvelope event = 2;
+         */
+        value: EventEnvelope;
+        case: "event";
+    } | {
+        /**
+         * @generated from field: sealant.v1.StreamFrame stream = 3;
+         */
+        value: StreamFrame;
+        case: "stream";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+};
+/**
+ * Describes the message sealant.v1.ServerMessage.
+ * Use `create(ServerMessageSchema)` to create a new message.
+ */
+export declare const ServerMessageSchema: GenMessage<ServerMessage>;
+/**
+ * @generated from enum sealant.v1.RuntimeState
+ */
+export declare enum RuntimeState {
+    /**
+     * @generated from enum value: RUNTIME_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: RUNTIME_STATE_STARTING = 1;
+     */
+    STARTING = 1,
+    /**
+     * @generated from enum value: RUNTIME_STATE_HEALTHY = 2;
+     */
+    HEALTHY = 2,
+    /**
+     * @generated from enum value: RUNTIME_STATE_DEGRADED = 3;
+     */
+    DEGRADED = 3,
+    /**
+     * @generated from enum value: RUNTIME_STATE_UNHEALTHY = 4;
+     */
+    UNHEALTHY = 4,
+    /**
+     * @generated from enum value: RUNTIME_STATE_SHUTTING_DOWN = 5;
+     */
+    SHUTTING_DOWN = 5,
+    /**
+     * @generated from enum value: RUNTIME_STATE_STOPPED = 6;
+     */
+    STOPPED = 6
+}
+/**
+ * Describes the enum sealant.v1.RuntimeState.
+ */
+export declare const RuntimeStateSchema: GenEnum<RuntimeState>;
+/**
+ * @generated from enum sealant.v1.ProcessState
+ */
+export declare enum ProcessState {
+    /**
+     * @generated from enum value: PROCESS_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: PROCESS_STATE_CREATED = 1;
+     */
+    CREATED = 1,
+    /**
+     * @generated from enum value: PROCESS_STATE_STARTING = 2;
+     */
+    STARTING = 2,
+    /**
+     * @generated from enum value: PROCESS_STATE_RUNNING = 3;
+     */
+    RUNNING = 3,
+    /**
+     * @generated from enum value: PROCESS_STATE_TERMINATING = 4;
+     */
+    TERMINATING = 4,
+    /**
+     * @generated from enum value: PROCESS_STATE_EXITED = 5;
+     */
+    EXITED = 5,
+    /**
+     * @generated from enum value: PROCESS_STATE_SIGNALED = 6;
+     */
+    SIGNALED = 6,
+    /**
+     * @generated from enum value: PROCESS_STATE_FAILED = 7;
+     */
+    FAILED = 7
+}
+/**
+ * Describes the enum sealant.v1.ProcessState.
+ */
+export declare const ProcessStateSchema: GenEnum<ProcessState>;
+/**
+ * @generated from enum sealant.v1.ExitReason
+ */
+export declare enum ExitReason {
+    /**
+     * @generated from enum value: EXIT_REASON_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: EXIT_REASON_EXITED = 1;
+     */
+    EXITED = 1,
+    /**
+     * @generated from enum value: EXIT_REASON_SIGNALED = 2;
+     */
+    SIGNALED = 2,
+    /**
+     * @generated from enum value: EXIT_REASON_TIMEOUT = 3;
+     */
+    TIMEOUT = 3,
+    /**
+     * @generated from enum value: EXIT_REASON_CANCELLED = 4;
+     */
+    CANCELLED = 4,
+    /**
+     * @generated from enum value: EXIT_REASON_START_FAILED = 5;
+     */
+    START_FAILED = 5,
+    /**
+     * @generated from enum value: EXIT_REASON_LOST = 6;
+     */
+    LOST = 6
+}
+/**
+ * Describes the enum sealant.v1.ExitReason.
+ */
+export declare const ExitReasonSchema: GenEnum<ExitReason>;
+/**
+ * @generated from enum sealant.v1.StreamKind
+ */
+export declare enum StreamKind {
+    /**
+     * @generated from enum value: STREAM_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: STREAM_KIND_STDIN = 1;
+     */
+    STDIN = 1,
+    /**
+     * @generated from enum value: STREAM_KIND_STDOUT = 2;
+     */
+    STDOUT = 2,
+    /**
+     * @generated from enum value: STREAM_KIND_STDERR = 3;
+     */
+    STDERR = 3,
+    /**
+     * @generated from enum value: STREAM_KIND_PTY_INPUT = 4;
+     */
+    PTY_INPUT = 4,
+    /**
+     * @generated from enum value: STREAM_KIND_PTY_OUTPUT = 5;
+     */
+    PTY_OUTPUT = 5
+}
+/**
+ * Describes the enum sealant.v1.StreamKind.
+ */
+export declare const StreamKindSchema: GenEnum<StreamKind>;
+/**
+ * @generated from enum sealant.v1.CaptureMethod
+ */
+export declare enum CaptureMethod {
+    /**
+     * @generated from enum value: CAPTURE_METHOD_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_PIPE = 1;
+     */
+    PIPE = 1,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_PTY = 2;
+     */
+    PTY = 2,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_PROXY = 3;
+     */
+    PROXY = 3,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_INOTIFY = 4;
+     */
+    INOTIFY = 4,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_SNAPSHOT = 5;
+     */
+    SNAPSHOT = 5,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_EBPF = 6;
+     */
+    EBPF = 6,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_NETLINK = 7;
+     */
+    NETLINK = 7,
+    /**
+     * @generated from enum value: CAPTURE_METHOD_INTERNAL = 8;
+     */
+    INTERNAL = 8
+}
+/**
+ * Describes the enum sealant.v1.CaptureMethod.
+ */
+export declare const CaptureMethodSchema: GenEnum<CaptureMethod>;
+/**
+ * @generated from enum sealant.v1.Confidence
+ */
+export declare enum Confidence {
+    /**
+     * @generated from enum value: CONFIDENCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CONFIDENCE_OBSERVED = 1;
+     */
+    OBSERVED = 1,
+    /**
+     * @generated from enum value: CONFIDENCE_INFERRED = 2;
+     */
+    INFERRED = 2,
+    /**
+     * @generated from enum value: CONFIDENCE_UNKNOWN = 3;
+     */
+    UNKNOWN = 3
+}
+/**
+ * Describes the enum sealant.v1.Confidence.
+ */
+export declare const ConfidenceSchema: GenEnum<Confidence>;
+/**
+ * @generated from enum sealant.v1.EventPriority
+ */
+export declare enum EventPriority {
+    /**
+     * @generated from enum value: EVENT_PRIORITY_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: EVENT_PRIORITY_CRITICAL = 1;
+     */
+    CRITICAL = 1,
+    /**
+     * @generated from enum value: EVENT_PRIORITY_NORMAL = 2;
+     */
+    NORMAL = 2,
+    /**
+     * @generated from enum value: EVENT_PRIORITY_LOW = 3;
+     */
+    LOW = 3
+}
+/**
+ * Describes the enum sealant.v1.EventPriority.
+ */
+export declare const EventPrioritySchema: GenEnum<EventPriority>;
+/**
+ * @generated from enum sealant.v1.Feature
+ */
+export declare enum Feature {
+    /**
+     * @generated from enum value: FEATURE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: FEATURE_FILESYSTEM_DIFFING = 1;
+     */
+    FILESYSTEM_DIFFING = 1,
+    /**
+     * @generated from enum value: FEATURE_LIVE_FILESYSTEM_WATCHING = 2;
+     */
+    LIVE_FILESYSTEM_WATCHING = 2,
+    /**
+     * @generated from enum value: FEATURE_NETWORK_COLLECTION = 3;
+     */
+    NETWORK_COLLECTION = 3,
+    /**
+     * @generated from enum value: FEATURE_PAYLOAD_CAPTURE = 4;
+     */
+    PAYLOAD_CAPTURE = 4,
+    /**
+     * @generated from enum value: FEATURE_VERBOSE_IO_CAPTURE = 5;
+     */
+    VERBOSE_IO_CAPTURE = 5,
+    /**
+     * @generated from enum value: FEATURE_RESOURCE_SAMPLING = 6;
+     */
+    RESOURCE_SAMPLING = 6
+}
+/**
+ * Describes the enum sealant.v1.Feature.
+ */
+export declare const FeatureSchema: GenEnum<Feature>;
+/**
+ * @generated from enum sealant.v1.Signal
+ */
+export declare enum Signal {
+    /**
+     * @generated from enum value: SIGNAL_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: SIGNAL_HUP = 1;
+     */
+    HUP = 1,
+    /**
+     * @generated from enum value: SIGNAL_INT = 2;
+     */
+    INT = 2,
+    /**
+     * @generated from enum value: SIGNAL_QUIT = 3;
+     */
+    QUIT = 3,
+    /**
+     * @generated from enum value: SIGNAL_TERM = 4;
+     */
+    TERM = 4,
+    /**
+     * @generated from enum value: SIGNAL_KILL = 5;
+     */
+    KILL = 5,
+    /**
+     * @generated from enum value: SIGNAL_USR1 = 6;
+     */
+    USR1 = 6,
+    /**
+     * @generated from enum value: SIGNAL_USR2 = 7;
+     */
+    USR2 = 7,
+    /**
+     * @generated from enum value: SIGNAL_STOP = 8;
+     */
+    STOP = 8,
+    /**
+     * @generated from enum value: SIGNAL_CONT = 9;
+     */
+    CONT = 9
+}
+/**
+ * Describes the enum sealant.v1.Signal.
+ */
+export declare const SignalSchema: GenEnum<Signal>;
+/**
+ * @generated from enum sealant.v1.CaptureMode
+ */
+export declare enum CaptureMode {
+    /**
+     * @generated from enum value: CAPTURE_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CAPTURE_MODE_FULL = 1;
+     */
+    FULL = 1,
+    /**
+     * @generated from enum value: CAPTURE_MODE_METADATA_ONLY = 2;
+     */
+    METADATA_ONLY = 2,
+    /**
+     * @generated from enum value: CAPTURE_MODE_DISABLED = 3;
+     */
+    DISABLED = 3
+}
+/**
+ * Describes the enum sealant.v1.CaptureMode.
+ */
+export declare const CaptureModeSchema: GenEnum<CaptureMode>;
+/**
+ * @generated from enum sealant.v1.NetworkMode
+ */
+export declare enum NetworkMode {
+    /**
+     * @generated from enum value: NETWORK_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: NETWORK_MODE_OFF = 1;
+     */
+    OFF = 1,
+    /**
+     * @generated from enum value: NETWORK_MODE_METADATA = 2;
+     */
+    METADATA = 2,
+    /**
+     * @generated from enum value: NETWORK_MODE_PROXY = 3;
+     */
+    PROXY = 3,
+    /**
+     * @generated from enum value: NETWORK_MODE_PRIVILEGED = 4;
+     */
+    PRIVILEGED = 4,
+    /**
+     * @generated from enum value: NETWORK_MODE_PAYLOAD = 5;
+     */
+    PAYLOAD = 5
+}
+/**
+ * Describes the enum sealant.v1.NetworkMode.
+ */
+export declare const NetworkModeSchema: GenEnum<NetworkMode>;
+/**
+ * @generated from enum sealant.v1.ControlErrorCode
+ */
+export declare enum ControlErrorCode {
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_INVALID_JSON = 1;
+     */
+    INVALID_JSON = 1,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_UNSUPPORTED_VERSION = 2;
+     */
+    UNSUPPORTED_VERSION = 2,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_FRAME_TOO_LARGE = 3;
+     */
+    FRAME_TOO_LARGE = 3,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_UNKNOWN_COMMAND = 4;
+     */
+    UNKNOWN_COMMAND = 4,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_INVALID_ARGUMENT = 5;
+     */
+    INVALID_ARGUMENT = 5,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_MISSING_COMMAND = 6;
+     */
+    MISSING_COMMAND = 6,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_EXECUTION_NOT_FOUND = 7;
+     */
+    EXECUTION_NOT_FOUND = 7,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_SESSION_NOT_FOUND = 8;
+     */
+    SESSION_NOT_FOUND = 8,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_PROCESS_NOT_FOUND = 9;
+     */
+    PROCESS_NOT_FOUND = 9,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_PROCESS_START_FAILED = 10;
+     */
+    PROCESS_START_FAILED = 10,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_PTY_ALLOCATION_FAILED = 11;
+     */
+    PTY_ALLOCATION_FAILED = 11,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_PERMISSION_DENIED = 12;
+     */
+    PERMISSION_DENIED = 12,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_POLICY_DENIED = 13;
+     */
+    POLICY_DENIED = 13,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_FEATURE_UNAVAILABLE = 14;
+     */
+    FEATURE_UNAVAILABLE = 14,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_CAPABILITY_UNAVAILABLE = 15;
+     */
+    CAPABILITY_UNAVAILABLE = 15,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_QUEUE_FULL = 16;
+     */
+    QUEUE_FULL = 16,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_RUNTIME_SHUTTING_DOWN = 17;
+     */
+    RUNTIME_SHUTTING_DOWN = 17,
+    /**
+     * @generated from enum value: CONTROL_ERROR_CODE_INTERNAL_ERROR = 18;
+     */
+    INTERNAL_ERROR = 18
+}
+/**
+ * Describes the enum sealant.v1.ControlErrorCode.
+ */
+export declare const ControlErrorCodeSchema: GenEnum<ControlErrorCode>;
+/**
+ * @generated from enum sealant.v1.FileChangeKind
+ */
+export declare enum FileChangeKind {
+    /**
+     * @generated from enum value: FILE_CHANGE_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: FILE_CHANGE_KIND_ADDED = 1;
+     */
+    ADDED = 1,
+    /**
+     * @generated from enum value: FILE_CHANGE_KIND_MODIFIED = 2;
+     */
+    MODIFIED = 2,
+    /**
+     * @generated from enum value: FILE_CHANGE_KIND_DELETED = 3;
+     */
+    DELETED = 3,
+    /**
+     * @generated from enum value: FILE_CHANGE_KIND_RENAMED = 4;
+     */
+    RENAMED = 4,
+    /**
+     * @generated from enum value: FILE_CHANGE_KIND_METADATA_CHANGED = 5;
+     */
+    METADATA_CHANGED = 5
+}
+/**
+ * Describes the enum sealant.v1.FileChangeKind.
+ */
+export declare const FileChangeKindSchema: GenEnum<FileChangeKind>;
+/**
+ * @generated from enum sealant.v1.FileType
+ */
+export declare enum FileType {
+    /**
+     * @generated from enum value: FILE_TYPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: FILE_TYPE_FILE = 1;
+     */
+    FILE = 1,
+    /**
+     * @generated from enum value: FILE_TYPE_DIR = 2;
+     */
+    DIR = 2,
+    /**
+     * @generated from enum value: FILE_TYPE_SYMLINK = 3;
+     */
+    SYMLINK = 3,
+    /**
+     * @generated from enum value: FILE_TYPE_OTHER = 4;
+     */
+    OTHER = 4
+}
+/**
+ * Describes the enum sealant.v1.FileType.
+ */
+export declare const FileTypeSchema: GenEnum<FileType>;
+/**
+ * @generated from enum sealant.v1.NetworkScheme
+ */
+export declare enum NetworkScheme {
+    /**
+     * @generated from enum value: NETWORK_SCHEME_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: NETWORK_SCHEME_HTTP = 1;
+     */
+    HTTP = 1,
+    /**
+     * @generated from enum value: NETWORK_SCHEME_HTTPS_CONNECT = 2;
+     */
+    HTTPS_CONNECT = 2
+}
+/**
+ * Describes the enum sealant.v1.NetworkScheme.
+ */
+export declare const NetworkSchemeSchema: GenEnum<NetworkScheme>;
+/**
+ * How a session's leader is wired to the daemon.
+ *
+ * @generated from enum sealant.v1.SessionMode
+ */
+export declare enum SessionMode {
+    /**
+     * @generated from enum value: SESSION_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * A pseudoterminal: the leader is a session leader with a controlling tty (interactive shells,
+     * TUIs). Output is the PTY byte stream; input is keystrokes; resize applies.
+     *
+     * @generated from enum value: SESSION_MODE_PTY = 1;
+     */
+    PTY = 1,
+    /**
+     * Plain pipes: stdin/stdout/stderr are pipes, no tty (protocol processes such as JSON-RPC
+     * servers). stdout is the journaled/attachable output, stderr is recorded as telemetry only,
+     * stdin is the input path; resize is rejected.
+     *
+     * @generated from enum value: SESSION_MODE_PIPE = 2;
+     */
+    PIPE = 2
+}
+/**
+ * Describes the enum sealant.v1.SessionMode.
+ */
+export declare const SessionModeSchema: GenEnum<SessionMode>;
+/**
+ * @generated from enum sealant.v1.AttachMode
+ */
+export declare enum AttachMode {
+    /**
+     * @generated from enum value: ATTACH_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: ATTACH_MODE_INTERACTIVE = 1;
+     */
+    INTERACTIVE = 1,
+    /**
+     * @generated from enum value: ATTACH_MODE_OBSERVE = 2;
+     */
+    OBSERVE = 2
+}
+/**
+ * Describes the enum sealant.v1.AttachMode.
+ */
+export declare const AttachModeSchema: GenEnum<AttachMode>;
+/**
+ * Session capture store (ADR-0015).
+ *
+ * @generated from enum sealant.v1.CaptureKind
+ */
+export declare enum CaptureKind {
+    /**
+     * @generated from enum value: CAPTURE_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CAPTURE_KIND_AUTO = 1;
+     */
+    AUTO = 1,
+    /**
+     * @generated from enum value: CAPTURE_KIND_TURN = 2;
+     */
+    TURN = 2,
+    /**
+     * @generated from enum value: CAPTURE_KIND_CHECKPOINT = 3;
+     */
+    CHECKPOINT = 3,
+    /**
+     * @generated from enum value: CAPTURE_KIND_SUSPEND = 4;
+     */
+    SUSPEND = 4,
+    /**
+     * @generated from enum value: CAPTURE_KIND_FINAL = 5;
+     */
+    FINAL = 5
+}
+/**
+ * Describes the enum sealant.v1.CaptureKind.
+ */
+export declare const CaptureKindSchema: GenEnum<CaptureKind>;
+/**
+ * What a `capture.flush` waits for. UNSPECIFIED is SUSPEND: a client that predates the field
+ * sends an empty `CaptureFlushArgs` (the command carried `Empty` before), and gets what it got.
+ *
+ * @generated from enum sealant.v1.CaptureFlushKind
+ */
+export declare enum CaptureFlushKind {
+    /**
+     * @generated from enum value: CAPTURE_FLUSH_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * A small-class snap; returns once every capture ahead of a bulk capture still uploading is
+     * registered (what a change or a diff needs). The bulk capture keeps uploading.
+     *
+     * @generated from enum value: CAPTURE_FLUSH_KIND_SUSPEND = 1;
+     */
+    SUSPEND = 1,
+    /**
+     * The executor is ending. In order: the daemon stops admitting new processes, execs, sessions
+     * and SFTP bridges (for good); terminates every managed process and session (SIGTERM, then
+     * SIGKILL after `grace_ms`) and waits for them; snaps the small AND the bulk class (both must
+     * succeed); then ships until nothing is pending, bulk included. The answer's `complete` says
+     * whether all of that happened; anything else (a snap failed, the lease is fenced, the chain
+     * conflicts, `deadline_ms` passed, a process survived SIGKILL) leaves it false with a reason.
+     *
+     * @generated from enum value: CAPTURE_FLUSH_KIND_FINAL = 2;
+     */
+    FINAL = 2
+}
+/**
+ * Describes the enum sealant.v1.CaptureFlushKind.
+ */
+export declare const CaptureFlushKindSchema: GenEnum<CaptureFlushKind>;
+/**
+ * What a capture snapped: the small class (git, `.git` bookkeeping, harness home) or the bulk
+ * class (dependencies, build outputs).
+ *
+ * @generated from enum sealant.v1.CaptureClass
+ */
+export declare enum CaptureClass {
+    /**
+     * @generated from enum value: CAPTURE_CLASS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CAPTURE_CLASS_SMALL = 1;
+     */
+    SMALL = 1,
+    /**
+     * @generated from enum value: CAPTURE_CLASS_BULK = 2;
+     */
+    BULK = 2
+}
+/**
+ * Describes the enum sealant.v1.CaptureClass.
+ */
+export declare const CaptureClassSchema: GenEnum<CaptureClass>;
+/**
+ * @generated from enum sealant.v1.SessionState
+ */
+export declare enum SessionState {
+    /**
+     * @generated from enum value: SESSION_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: SESSION_STATE_RUNNING = 1;
+     */
+    RUNNING = 1,
+    /**
+     * @generated from enum value: SESSION_STATE_EXITED = 2;
+     */
+    EXITED = 2
+}
+/**
+ * Describes the enum sealant.v1.SessionState.
+ */
+export declare const SessionStateSchema: GenEnum<SessionState>;
+//# sourceMappingURL=sealant_pb.d.ts.map