@slipway-systems/sdk 0.0.0 → 0.2.0

package/dist/gen/slipway/v1/secrets_pb.d.ts

@@ -0,0 +1,1298 @@
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, FieldMask, Timestamp } from "@bufbuild/protobuf/wkt";
+import type { PageRequest, PageResponse } from "./common_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file slipway/v1/secrets.proto.
+ */
+export declare const file_slipway_v1_secrets: GenFile;
+/**
+ * Secret is metadata only; the value is never returned.
+ *
+ * @generated from message slipway.v1.Secret
+ */
+export type Secret = Message<"slipway.v1.Secret"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: slipway.v1.SecretScope scope = 2;
+     */
+    scope: SecretScope;
+    /**
+     * @generated from field: string project_id = 3;
+     */
+    projectId: string;
+    /**
+     * @generated from field: string environment_id = 4;
+     */
+    environmentId: string;
+    /**
+     * env-var style, [A-Za-z_][A-Za-z0-9_]*
+     *
+     * @generated from field: string name = 5;
+     */
+    name: string;
+    /**
+     * @generated from field: string description = 6;
+     */
+    description: string;
+    /**
+     * @generated from field: slipway.v1.SecretKind kind = 7;
+     */
+    kind: SecretKind;
+    /**
+     * @generated from field: int32 current_version = 8;
+     */
+    currentVersion: number;
+    /**
+     * set when kind == EXTERNAL_REF, e.g. vault://prod/secret/app#password
+     *
+     * @generated from field: string external_ref = 9;
+     */
+    externalRef: string;
+    /**
+     * empty = any pipeline; entries match pipeline id or name (glob)
+     *
+     * @generated from field: repeated string allowed_pipelines = 10;
+     */
+    allowedPipelines: string[];
+    /**
+     * empty = any environment; entries match environment id or name (glob)
+     *
+     * @generated from field: repeated string allowed_environments = 11;
+     */
+    allowedEnvironments: string[];
+    /**
+     * @generated from field: google.protobuf.Timestamp last_used_at = 12;
+     */
+    lastUsedAt?: Timestamp | undefined;
+    /**
+     * @generated from field: string created_by = 13;
+     */
+    createdBy: string;
+    /**
+     * @generated from field: string updated_by = 14;
+     */
+    updatedBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 15;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * @generated from field: google.protobuf.Timestamp updated_at = 16;
+     */
+    updatedAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message slipway.v1.Secret.
+ * Use `create(SecretSchema)` to create a new message.
+ */
+export declare const SecretSchema: GenMessage<Secret>;
+/**
+ * @generated from message slipway.v1.SecretVersion
+ */
+export type SecretVersion = Message<"slipway.v1.SecretVersion"> & {
+    /**
+     * @generated from field: int32 version = 1;
+     */
+    version: number;
+    /**
+     * @generated from field: slipway.v1.SecretKind kind = 2;
+     */
+    kind: SecretKind;
+    /**
+     * @generated from field: string external_ref = 3;
+     */
+    externalRef: string;
+    /**
+     * @generated from field: string comment = 4;
+     */
+    comment: string;
+    /**
+     * non-zero when this version is a rollback copy of an earlier one
+     *
+     * @generated from field: int32 restored_from = 5;
+     */
+    restoredFrom: number;
+    /**
+     * @generated from field: bool current = 6;
+     */
+    current: boolean;
+    /**
+     * @generated from field: string created_by = 7;
+     */
+    createdBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 8;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * true until lazily or explicitly re-encrypted under the active DEK
+     *
+     * @generated from field: bool encrypted_with_retired_key = 9;
+     */
+    encryptedWithRetiredKey: boolean;
+};
+/**
+ * Describes the message slipway.v1.SecretVersion.
+ * Use `create(SecretVersionSchema)` to create a new message.
+ */
+export declare const SecretVersionSchema: GenMessage<SecretVersion>;
+/**
+ * @generated from message slipway.v1.ListSecretsRequest
+ */
+export type ListSecretsRequest = Message<"slipway.v1.ListSecretsRequest"> & {
+    /**
+     * @generated from field: slipway.v1.PageRequest page = 1;
+     */
+    page?: PageRequest | undefined;
+    /**
+     * @generated from field: slipway.v1.SecretScope scope = 2;
+     */
+    scope: SecretScope;
+    /**
+     * @generated from field: string project_id = 3;
+     */
+    projectId: string;
+    /**
+     * @generated from field: string environment_id = 4;
+     */
+    environmentId: string;
+    /**
+     * @generated from field: slipway.v1.SecretKind kind = 5;
+     */
+    kind: SecretKind;
+    /**
+     * @generated from field: string name_prefix = 6;
+     */
+    namePrefix: string;
+};
+/**
+ * Describes the message slipway.v1.ListSecretsRequest.
+ * Use `create(ListSecretsRequestSchema)` to create a new message.
+ */
+export declare const ListSecretsRequestSchema: GenMessage<ListSecretsRequest>;
+/**
+ * @generated from message slipway.v1.ListSecretsResponse
+ */
+export type ListSecretsResponse = Message<"slipway.v1.ListSecretsResponse"> & {
+    /**
+     * @generated from field: repeated slipway.v1.Secret items = 1;
+     */
+    items: Secret[];
+    /**
+     * @generated from field: slipway.v1.PageResponse page = 2;
+     */
+    page?: PageResponse | undefined;
+};
+/**
+ * Describes the message slipway.v1.ListSecretsResponse.
+ * Use `create(ListSecretsResponseSchema)` to create a new message.
+ */
+export declare const ListSecretsResponseSchema: GenMessage<ListSecretsResponse>;
+/**
+ * @generated from message slipway.v1.GetSecretRequest
+ */
+export type GetSecretRequest = Message<"slipway.v1.GetSecretRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * Describes the message slipway.v1.GetSecretRequest.
+ * Use `create(GetSecretRequestSchema)` to create a new message.
+ */
+export declare const GetSecretRequestSchema: GenMessage<GetSecretRequest>;
+/**
+ * @generated from message slipway.v1.GetSecretResponse
+ */
+export type GetSecretResponse = Message<"slipway.v1.GetSecretResponse"> & {
+    /**
+     * @generated from field: slipway.v1.Secret secret = 1;
+     */
+    secret?: Secret | undefined;
+};
+/**
+ * Describes the message slipway.v1.GetSecretResponse.
+ * Use `create(GetSecretResponseSchema)` to create a new message.
+ */
+export declare const GetSecretResponseSchema: GenMessage<GetSecretResponse>;
+/**
+ * @generated from message slipway.v1.CreateSecretRequest
+ */
+export type CreateSecretRequest = Message<"slipway.v1.CreateSecretRequest"> & {
+    /**
+     * @generated from field: slipway.v1.SecretScope scope = 1;
+     */
+    scope: SecretScope;
+    /**
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+    /**
+     * @generated from field: string environment_id = 3;
+     */
+    environmentId: string;
+    /**
+     * @generated from field: string name = 4;
+     */
+    name: string;
+    /**
+     * @generated from field: string description = 5;
+     */
+    description: string;
+    /**
+     * @generated from field: slipway.v1.SecretKind kind = 6;
+     */
+    kind: SecretKind;
+    /**
+     * STATIC only
+     *
+     * @generated from field: string value = 7;
+     */
+    value: string;
+    /**
+     * EXTERNAL_REF only
+     *
+     * @generated from field: string external_ref = 8;
+     */
+    externalRef: string;
+    /**
+     * @generated from field: repeated string allowed_pipelines = 9;
+     */
+    allowedPipelines: string[];
+    /**
+     * @generated from field: repeated string allowed_environments = 10;
+     */
+    allowedEnvironments: string[];
+    /**
+     * @generated from field: string comment = 11;
+     */
+    comment: string;
+};
+/**
+ * Describes the message slipway.v1.CreateSecretRequest.
+ * Use `create(CreateSecretRequestSchema)` to create a new message.
+ */
+export declare const CreateSecretRequestSchema: GenMessage<CreateSecretRequest>;
+/**
+ * UpdateSecretRequest: update_mask paths may be description, allowed_pipelines, allowed_environments, value,
+ * external_ref. Changing value or external_ref creates a new version.
+ *
+ * @generated from message slipway.v1.UpdateSecretRequest
+ */
+export type UpdateSecretRequest = Message<"slipway.v1.UpdateSecretRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string description = 2;
+     */
+    description: string;
+    /**
+     * @generated from field: string value = 3;
+     */
+    value: string;
+    /**
+     * @generated from field: string external_ref = 4;
+     */
+    externalRef: string;
+    /**
+     * @generated from field: repeated string allowed_pipelines = 5;
+     */
+    allowedPipelines: string[];
+    /**
+     * @generated from field: repeated string allowed_environments = 6;
+     */
+    allowedEnvironments: string[];
+    /**
+     * @generated from field: string comment = 7;
+     */
+    comment: string;
+    /**
+     * @generated from field: google.protobuf.FieldMask update_mask = 8;
+     */
+    updateMask?: FieldMask | undefined;
+};
+/**
+ * Describes the message slipway.v1.UpdateSecretRequest.
+ * Use `create(UpdateSecretRequestSchema)` to create a new message.
+ */
+export declare const UpdateSecretRequestSchema: GenMessage<UpdateSecretRequest>;
+/**
+ * @generated from message slipway.v1.CreateSecretResponse
+ */
+export type CreateSecretResponse = Message<"slipway.v1.CreateSecretResponse"> & {
+    /**
+     * @generated from field: slipway.v1.Secret secret = 1;
+     */
+    secret?: Secret | undefined;
+};
+/**
+ * Describes the message slipway.v1.CreateSecretResponse.
+ * Use `create(CreateSecretResponseSchema)` to create a new message.
+ */
+export declare const CreateSecretResponseSchema: GenMessage<CreateSecretResponse>;
+/**
+ * @generated from message slipway.v1.UpdateSecretResponse
+ */
+export type UpdateSecretResponse = Message<"slipway.v1.UpdateSecretResponse"> & {
+    /**
+     * @generated from field: slipway.v1.Secret secret = 1;
+     */
+    secret?: Secret | undefined;
+};
+/**
+ * Describes the message slipway.v1.UpdateSecretResponse.
+ * Use `create(UpdateSecretResponseSchema)` to create a new message.
+ */
+export declare const UpdateSecretResponseSchema: GenMessage<UpdateSecretResponse>;
+/**
+ * @generated from message slipway.v1.DeleteSecretRequest
+ */
+export type DeleteSecretRequest = Message<"slipway.v1.DeleteSecretRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * Describes the message slipway.v1.DeleteSecretRequest.
+ * Use `create(DeleteSecretRequestSchema)` to create a new message.
+ */
+export declare const DeleteSecretRequestSchema: GenMessage<DeleteSecretRequest>;
+/**
+ * @generated from message slipway.v1.DeleteSecretResponse
+ */
+export type DeleteSecretResponse = Message<"slipway.v1.DeleteSecretResponse"> & {};
+/**
+ * Describes the message slipway.v1.DeleteSecretResponse.
+ * Use `create(DeleteSecretResponseSchema)` to create a new message.
+ */
+export declare const DeleteSecretResponseSchema: GenMessage<DeleteSecretResponse>;
+/**
+ * RotateSecretRequest creates a new version. With new_value set the secret value is replaced; without it the
+ * current value is re-encrypted under the active DEK (a no-op for external references).
+ *
+ * @generated from message slipway.v1.RotateSecretRequest
+ */
+export type RotateSecretRequest = Message<"slipway.v1.RotateSecretRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string new_value = 2;
+     */
+    newValue: string;
+    /**
+     * @generated from field: string new_external_ref = 3;
+     */
+    newExternalRef: string;
+    /**
+     * @generated from field: string comment = 4;
+     */
+    comment: string;
+};
+/**
+ * Describes the message slipway.v1.RotateSecretRequest.
+ * Use `create(RotateSecretRequestSchema)` to create a new message.
+ */
+export declare const RotateSecretRequestSchema: GenMessage<RotateSecretRequest>;
+/**
+ * @generated from message slipway.v1.RotateSecretResponse
+ */
+export type RotateSecretResponse = Message<"slipway.v1.RotateSecretResponse"> & {
+    /**
+     * @generated from field: slipway.v1.Secret secret = 1;
+     */
+    secret?: Secret | undefined;
+};
+/**
+ * Describes the message slipway.v1.RotateSecretResponse.
+ * Use `create(RotateSecretResponseSchema)` to create a new message.
+ */
+export declare const RotateSecretResponseSchema: GenMessage<RotateSecretResponse>;
+/**
+ * @generated from message slipway.v1.ListSecretVersionsRequest
+ */
+export type ListSecretVersionsRequest = Message<"slipway.v1.ListSecretVersionsRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * Describes the message slipway.v1.ListSecretVersionsRequest.
+ * Use `create(ListSecretVersionsRequestSchema)` to create a new message.
+ */
+export declare const ListSecretVersionsRequestSchema: GenMessage<ListSecretVersionsRequest>;
+/**
+ * @generated from message slipway.v1.ListSecretVersionsResponse
+ */
+export type ListSecretVersionsResponse = Message<"slipway.v1.ListSecretVersionsResponse"> & {
+    /**
+     * @generated from field: repeated slipway.v1.SecretVersion items = 1;
+     */
+    items: SecretVersion[];
+};
+/**
+ * Describes the message slipway.v1.ListSecretVersionsResponse.
+ * Use `create(ListSecretVersionsResponseSchema)` to create a new message.
+ */
+export declare const ListSecretVersionsResponseSchema: GenMessage<ListSecretVersionsResponse>;
+/**
+ * @generated from message slipway.v1.RollbackSecretRequest
+ */
+export type RollbackSecretRequest = Message<"slipway.v1.RollbackSecretRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: int32 version = 2;
+     */
+    version: number;
+    /**
+     * @generated from field: string comment = 3;
+     */
+    comment: string;
+};
+/**
+ * Describes the message slipway.v1.RollbackSecretRequest.
+ * Use `create(RollbackSecretRequestSchema)` to create a new message.
+ */
+export declare const RollbackSecretRequestSchema: GenMessage<RollbackSecretRequest>;
+/**
+ * @generated from message slipway.v1.RollbackSecretResponse
+ */
+export type RollbackSecretResponse = Message<"slipway.v1.RollbackSecretResponse"> & {
+    /**
+     * @generated from field: slipway.v1.Secret secret = 1;
+     */
+    secret?: Secret | undefined;
+};
+/**
+ * Describes the message slipway.v1.RollbackSecretResponse.
+ * Use `create(RollbackSecretResponseSchema)` to create a new message.
+ */
+export declare const RollbackSecretResponseSchema: GenMessage<RollbackSecretResponse>;
+/**
+ * @generated from message slipway.v1.ImportSecretsRequest
+ */
+export type ImportSecretsRequest = Message<"slipway.v1.ImportSecretsRequest"> & {
+    /**
+     * @generated from field: slipway.v1.SecretScope scope = 1;
+     */
+    scope: SecretScope;
+    /**
+     * @generated from field: string project_id = 2;
+     */
+    projectId: string;
+    /**
+     * @generated from field: string environment_id = 3;
+     */
+    environmentId: string;
+    /**
+     * @generated from field: slipway.v1.SecretImportFormat format = 4;
+     */
+    format: SecretImportFormat;
+    /**
+     * @generated from field: string data = 5;
+     */
+    data: string;
+    /**
+     * update existing secrets (new version); otherwise existing names are skipped
+     *
+     * @generated from field: bool overwrite = 6;
+     */
+    overwrite: boolean;
+    /**
+     * @generated from field: bool dry_run = 7;
+     */
+    dryRun: boolean;
+    /**
+     * @generated from field: repeated string allowed_pipelines = 8;
+     */
+    allowedPipelines: string[];
+    /**
+     * @generated from field: repeated string allowed_environments = 9;
+     */
+    allowedEnvironments: string[];
+};
+/**
+ * Describes the message slipway.v1.ImportSecretsRequest.
+ * Use `create(ImportSecretsRequestSchema)` to create a new message.
+ */
+export declare const ImportSecretsRequestSchema: GenMessage<ImportSecretsRequest>;
+/**
+ * @generated from message slipway.v1.ImportSecretResult
+ */
+export type ImportSecretResult = Message<"slipway.v1.ImportSecretResult"> & {
+    /**
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * created | updated | skipped | invalid
+     *
+     * @generated from field: string status = 2;
+     */
+    status: string;
+    /**
+     * @generated from field: string message = 3;
+     */
+    message: string;
+};
+/**
+ * Describes the message slipway.v1.ImportSecretResult.
+ * Use `create(ImportSecretResultSchema)` to create a new message.
+ */
+export declare const ImportSecretResultSchema: GenMessage<ImportSecretResult>;
+/**
+ * @generated from message slipway.v1.ImportSecretsResponse
+ */
+export type ImportSecretsResponse = Message<"slipway.v1.ImportSecretsResponse"> & {
+    /**
+     * @generated from field: int32 created = 1;
+     */
+    created: number;
+    /**
+     * @generated from field: int32 updated = 2;
+     */
+    updated: number;
+    /**
+     * @generated from field: int32 skipped = 3;
+     */
+    skipped: number;
+    /**
+     * @generated from field: int32 invalid = 4;
+     */
+    invalid: number;
+    /**
+     * @generated from field: repeated slipway.v1.ImportSecretResult results = 5;
+     */
+    results: ImportSecretResult[];
+};
+/**
+ * Describes the message slipway.v1.ImportSecretsResponse.
+ * Use `create(ImportSecretsResponseSchema)` to create a new message.
+ */
+export declare const ImportSecretsResponseSchema: GenMessage<ImportSecretsResponse>;
+/**
+ * SecretProviderField describes one config or credential input for a provider so the UI can render a form.
+ *
+ * @generated from message slipway.v1.SecretProviderField
+ */
+export type SecretProviderField = Message<"slipway.v1.SecretProviderField"> & {
+    /**
+     * @generated from field: string key = 1;
+     */
+    key: string;
+    /**
+     * @generated from field: string label = 2;
+     */
+    label: string;
+    /**
+     * @generated from field: string description = 3;
+     */
+    description: string;
+    /**
+     * @generated from field: bool required = 4;
+     */
+    required: boolean;
+    /**
+     * credential: write-only, masked in the UI
+     *
+     * @generated from field: bool secret = 5;
+     */
+    secret: boolean;
+    /**
+     * @generated from field: repeated string options = 6;
+     */
+    options: string[];
+    /**
+     * @generated from field: string default_value = 7;
+     */
+    defaultValue: string;
+};
+/**
+ * Describes the message slipway.v1.SecretProviderField.
+ * Use `create(SecretProviderFieldSchema)` to create a new message.
+ */
+export declare const SecretProviderFieldSchema: GenMessage<SecretProviderField>;
+/**
+ * SecretProviderType is one supported external secret manager (static catalogue).
+ *
+ * @generated from message slipway.v1.SecretProviderType
+ */
+export type SecretProviderType = Message<"slipway.v1.SecretProviderType"> & {
+    /**
+     * vault | aws_sm | gcp_sm | azure_kv | onepassword | doppler | infisical
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string display_name = 2;
+     */
+    displayName: string;
+    /**
+     * ref URI scheme, e.g. vault
+     *
+     * @generated from field: string scheme = 3;
+     */
+    scheme: string;
+    /**
+     * @generated from field: string description = 4;
+     */
+    description: string;
+    /**
+     * e.g. vault://<connection>/<mount>/<path>#<field>
+     *
+     * @generated from field: string ref_format = 5;
+     */
+    refFormat: string;
+    /**
+     * @generated from field: string ref_example = 6;
+     */
+    refExample: string;
+    /**
+     * @generated from field: repeated slipway.v1.SecretProviderField config_fields = 7;
+     */
+    configFields: SecretProviderField[];
+    /**
+     * @generated from field: repeated slipway.v1.SecretProviderField credential_fields = 8;
+     */
+    credentialFields: SecretProviderField[];
+    /**
+     * @generated from field: repeated string auth_methods = 9;
+     */
+    authMethods: string[];
+    /**
+     * can authenticate with the job's OIDC token (no stored credentials)
+     *
+     * @generated from field: bool supports_job_identity = 10;
+     */
+    supportsJobIdentity: boolean;
+};
+/**
+ * Describes the message slipway.v1.SecretProviderType.
+ * Use `create(SecretProviderTypeSchema)` to create a new message.
+ */
+export declare const SecretProviderTypeSchema: GenMessage<SecretProviderType>;
+/**
+ * SecretProviderConnection is an org's configured connection to a provider; credentials are never returned.
+ *
+ * @generated from message slipway.v1.SecretProviderConnection
+ */
+export type SecretProviderConnection = Message<"slipway.v1.SecretProviderConnection"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * @generated from field: string provider = 3;
+     */
+    provider: string;
+    /**
+     * @generated from field: map<string, string> config = 4;
+     */
+    config: {
+        [key: string]: string;
+    };
+    /**
+     * @generated from field: bool has_credentials = 5;
+     */
+    hasCredentials: boolean;
+    /**
+     * @generated from field: string created_by = 6;
+     */
+    createdBy: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 7;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * @generated from field: google.protobuf.Timestamp updated_at = 8;
+     */
+    updatedAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message slipway.v1.SecretProviderConnection.
+ * Use `create(SecretProviderConnectionSchema)` to create a new message.
+ */
+export declare const SecretProviderConnectionSchema: GenMessage<SecretProviderConnection>;
+/**
+ * @generated from message slipway.v1.ListSecretProvidersRequest
+ */
+export type ListSecretProvidersRequest = Message<"slipway.v1.ListSecretProvidersRequest"> & {};
+/**
+ * Describes the message slipway.v1.ListSecretProvidersRequest.
+ * Use `create(ListSecretProvidersRequestSchema)` to create a new message.
+ */
+export declare const ListSecretProvidersRequestSchema: GenMessage<ListSecretProvidersRequest>;
+/**
+ * @generated from message slipway.v1.ListSecretProvidersResponse
+ */
+export type ListSecretProvidersResponse = Message<"slipway.v1.ListSecretProvidersResponse"> & {
+    /**
+     * @generated from field: repeated slipway.v1.SecretProviderType types = 1;
+     */
+    types: SecretProviderType[];
+    /**
+     * @generated from field: repeated slipway.v1.SecretProviderConnection connections = 2;
+     */
+    connections: SecretProviderConnection[];
+};
+/**
+ * Describes the message slipway.v1.ListSecretProvidersResponse.
+ * Use `create(ListSecretProvidersResponseSchema)` to create a new message.
+ */
+export declare const ListSecretProvidersResponseSchema: GenMessage<ListSecretProvidersResponse>;
+/**
+ * @generated from message slipway.v1.UpsertSecretProviderRequest
+ */
+export type UpsertSecretProviderRequest = Message<"slipway.v1.UpsertSecretProviderRequest"> & {
+    /**
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * @generated from field: string provider = 2;
+     */
+    provider: string;
+    /**
+     * @generated from field: map<string, string> config = 3;
+     */
+    config: {
+        [key: string]: string;
+    };
+    /**
+     * write-only
+     *
+     * @generated from field: map<string, string> credentials = 4;
+     */
+    credentials: {
+        [key: string]: string;
+    };
+};
+/**
+ * Describes the message slipway.v1.UpsertSecretProviderRequest.
+ * Use `create(UpsertSecretProviderRequestSchema)` to create a new message.
+ */
+export declare const UpsertSecretProviderRequestSchema: GenMessage<UpsertSecretProviderRequest>;
+/**
+ * @generated from message slipway.v1.UpsertSecretProviderResponse
+ */
+export type UpsertSecretProviderResponse = Message<"slipway.v1.UpsertSecretProviderResponse"> & {
+    /**
+     * @generated from field: slipway.v1.SecretProviderConnection connection = 1;
+     */
+    connection?: SecretProviderConnection | undefined;
+};
+/**
+ * Describes the message slipway.v1.UpsertSecretProviderResponse.
+ * Use `create(UpsertSecretProviderResponseSchema)` to create a new message.
+ */
+export declare const UpsertSecretProviderResponseSchema: GenMessage<UpsertSecretProviderResponse>;
+/**
+ * @generated from message slipway.v1.DeleteSecretProviderRequest
+ */
+export type DeleteSecretProviderRequest = Message<"slipway.v1.DeleteSecretProviderRequest"> & {
+    /**
+     * @generated from field: string name = 1;
+     */
+    name: string;
+};
+/**
+ * Describes the message slipway.v1.DeleteSecretProviderRequest.
+ * Use `create(DeleteSecretProviderRequestSchema)` to create a new message.
+ */
+export declare const DeleteSecretProviderRequestSchema: GenMessage<DeleteSecretProviderRequest>;
+/**
+ * @generated from message slipway.v1.DeleteSecretProviderResponse
+ */
+export type DeleteSecretProviderResponse = Message<"slipway.v1.DeleteSecretProviderResponse"> & {};
+/**
+ * Describes the message slipway.v1.DeleteSecretProviderResponse.
+ * Use `create(DeleteSecretProviderResponseSchema)` to create a new message.
+ */
+export declare const DeleteSecretProviderResponseSchema: GenMessage<DeleteSecretProviderResponse>;
+/**
+ * TestExternalRefRequest resolves a reference and reports success without returning the value.
+ *
+ * @generated from message slipway.v1.TestExternalRefRequest
+ */
+export type TestExternalRefRequest = Message<"slipway.v1.TestExternalRefRequest"> & {
+    /**
+     * @generated from field: string ref = 1;
+     */
+    ref: string;
+};
+/**
+ * Describes the message slipway.v1.TestExternalRefRequest.
+ * Use `create(TestExternalRefRequestSchema)` to create a new message.
+ */
+export declare const TestExternalRefRequestSchema: GenMessage<TestExternalRefRequest>;
+/**
+ * @generated from message slipway.v1.TestExternalRefResponse
+ */
+export type TestExternalRefResponse = Message<"slipway.v1.TestExternalRefResponse"> & {
+    /**
+     * @generated from field: bool ok = 1;
+     */
+    ok: boolean;
+    /**
+     * @generated from field: string error = 2;
+     */
+    error: string;
+    /**
+     * @generated from field: string provider = 3;
+     */
+    provider: string;
+    /**
+     * @generated from field: int32 value_length = 4;
+     */
+    valueLength: number;
+    /**
+     * @generated from field: google.protobuf.Duration latency = 5;
+     */
+    latency?: Duration | undefined;
+};
+/**
+ * Describes the message slipway.v1.TestExternalRefResponse.
+ * Use `create(TestExternalRefResponseSchema)` to create a new message.
+ */
+export declare const TestExternalRefResponseSchema: GenMessage<TestExternalRefResponse>;
+/**
+ * SecretKeyring is the org's key hierarchy summary (no key material).
+ *
+ * @generated from message slipway.v1.SecretKeyring
+ */
+export type SecretKeyring = Message<"slipway.v1.SecretKeyring"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * local | aws_kms | gcp_kms | azure_kv | vault_transit
+     *
+     * @generated from field: string provider = 2;
+     */
+    provider: string;
+    /**
+     * @generated from field: string key_ref = 3;
+     */
+    keyRef: string;
+    /**
+     * @generated from field: map<string, string> config = 4;
+     */
+    config: {
+        [key: string]: string;
+    };
+    /**
+     * @generated from field: bool byok = 5;
+     */
+    byok: boolean;
+    /**
+     * @generated from field: string status = 6;
+     */
+    status: string;
+    /**
+     * @generated from field: int32 rotation_count = 7;
+     */
+    rotationCount: number;
+    /**
+     * @generated from field: google.protobuf.Timestamp last_rotated_at = 8;
+     */
+    lastRotatedAt?: Timestamp | undefined;
+    /**
+     * @generated from field: int32 active_dek_version = 9;
+     */
+    activeDekVersion: number;
+    /**
+     * @generated from field: int32 dek_count = 10;
+     */
+    dekCount: number;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 11;
+     */
+    createdAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message slipway.v1.SecretKeyring.
+ * Use `create(SecretKeyringSchema)` to create a new message.
+ */
+export declare const SecretKeyringSchema: GenMessage<SecretKeyring>;
+/**
+ * @generated from message slipway.v1.GetKeyringRequest
+ */
+export type GetKeyringRequest = Message<"slipway.v1.GetKeyringRequest"> & {};
+/**
+ * Describes the message slipway.v1.GetKeyringRequest.
+ * Use `create(GetKeyringRequestSchema)` to create a new message.
+ */
+export declare const GetKeyringRequestSchema: GenMessage<GetKeyringRequest>;
+/**
+ * @generated from message slipway.v1.GetKeyringResponse
+ */
+export type GetKeyringResponse = Message<"slipway.v1.GetKeyringResponse"> & {
+    /**
+     * @generated from field: slipway.v1.SecretKeyring keyring = 1;
+     */
+    keyring?: SecretKeyring | undefined;
+    /**
+     * plan allows customer-managed keys
+     *
+     * @generated from field: bool byok_entitled = 2;
+     */
+    byokEntitled: boolean;
+    /**
+     * @generated from field: int64 secrets_on_retired_keys = 3;
+     */
+    secretsOnRetiredKeys: bigint;
+};
+/**
+ * Describes the message slipway.v1.GetKeyringResponse.
+ * Use `create(GetKeyringResponseSchema)` to create a new message.
+ */
+export declare const GetKeyringResponseSchema: GenMessage<GetKeyringResponse>;
+/**
+ * ConfigureKeyringRequest switches the org to a customer-managed key (BYOK; Team plan and above). All DEKs are
+ * re-wrapped under the new KEK; secret ciphertexts are untouched.
+ *
+ * @generated from message slipway.v1.ConfigureKeyringRequest
+ */
+export type ConfigureKeyringRequest = Message<"slipway.v1.ConfigureKeyringRequest"> & {
+    /**
+     * @generated from field: string provider = 1;
+     */
+    provider: string;
+    /**
+     * @generated from field: string key_ref = 2;
+     */
+    keyRef: string;
+    /**
+     * @generated from field: map<string, string> config = 3;
+     */
+    config: {
+        [key: string]: string;
+    };
+    /**
+     * write-only
+     *
+     * @generated from field: map<string, string> credentials = 4;
+     */
+    credentials: {
+        [key: string]: string;
+    };
+};
+/**
+ * Describes the message slipway.v1.ConfigureKeyringRequest.
+ * Use `create(ConfigureKeyringRequestSchema)` to create a new message.
+ */
+export declare const ConfigureKeyringRequestSchema: GenMessage<ConfigureKeyringRequest>;
+/**
+ * @generated from message slipway.v1.ConfigureKeyringResponse
+ */
+export type ConfigureKeyringResponse = Message<"slipway.v1.ConfigureKeyringResponse"> & {
+    /**
+     * @generated from field: slipway.v1.SecretKeyring keyring = 1;
+     */
+    keyring?: SecretKeyring | undefined;
+    /**
+     * @generated from field: int32 deks_rewrapped = 2;
+     */
+    deksRewrapped: number;
+};
+/**
+ * Describes the message slipway.v1.ConfigureKeyringResponse.
+ * Use `create(ConfigureKeyringResponseSchema)` to create a new message.
+ */
+export declare const ConfigureKeyringResponseSchema: GenMessage<ConfigureKeyringResponse>;
+/**
+ * @generated from message slipway.v1.RotateKeyringRequest
+ */
+export type RotateKeyringRequest = Message<"slipway.v1.RotateKeyringRequest"> & {
+    /**
+     * @generated from field: slipway.v1.KeyRotationMode mode = 1;
+     */
+    mode: KeyRotationMode;
+    /**
+     * DEK mode: also re-encrypt existing secrets now (bounded batch)
+     *
+     * @generated from field: bool reencrypt = 2;
+     */
+    reencrypt: boolean;
+};
+/**
+ * Describes the message slipway.v1.RotateKeyringRequest.
+ * Use `create(RotateKeyringRequestSchema)` to create a new message.
+ */
+export declare const RotateKeyringRequestSchema: GenMessage<RotateKeyringRequest>;
+/**
+ * @generated from message slipway.v1.RotateKeyringResponse
+ */
+export type RotateKeyringResponse = Message<"slipway.v1.RotateKeyringResponse"> & {
+    /**
+     * @generated from field: slipway.v1.SecretKeyring keyring = 1;
+     */
+    keyring?: SecretKeyring | undefined;
+    /**
+     * @generated from field: int32 deks_rewrapped = 2;
+     */
+    deksRewrapped: number;
+    /**
+     * @generated from field: int32 secrets_reencrypted = 3;
+     */
+    secretsReencrypted: number;
+    /**
+     * @generated from field: int64 secrets_remaining = 4;
+     */
+    secretsRemaining: bigint;
+};
+/**
+ * Describes the message slipway.v1.RotateKeyringResponse.
+ * Use `create(RotateKeyringResponseSchema)` to create a new message.
+ */
+export declare const RotateKeyringResponseSchema: GenMessage<RotateKeyringResponse>;
+/**
+ * @generated from enum slipway.v1.SecretScope
+ */
+export declare enum SecretScope {
+    /**
+     * @generated from enum value: SECRET_SCOPE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: SECRET_SCOPE_ORG = 1;
+     */
+    ORG = 1,
+    /**
+     * @generated from enum value: SECRET_SCOPE_PROJECT = 2;
+     */
+    PROJECT = 2,
+    /**
+     * @generated from enum value: SECRET_SCOPE_ENVIRONMENT = 3;
+     */
+    ENVIRONMENT = 3
+}
+/**
+ * Describes the enum slipway.v1.SecretScope.
+ */
+export declare const SecretScopeSchema: GenEnum<SecretScope>;
+/**
+ * @generated from enum slipway.v1.SecretKind
+ */
+export declare enum SecretKind {
+    /**
+     * @generated from enum value: SECRET_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * value encrypted at rest with the org DEK
+     *
+     * @generated from enum value: SECRET_KIND_STATIC = 1;
+     */
+    STATIC = 1,
+    /**
+     * value resolved at use time from an external manager
+     *
+     * @generated from enum value: SECRET_KIND_EXTERNAL_REF = 2;
+     */
+    EXTERNAL_REF = 2
+}
+/**
+ * Describes the enum slipway.v1.SecretKind.
+ */
+export declare const SecretKindSchema: GenEnum<SecretKind>;
+/**
+ * @generated from enum slipway.v1.SecretImportFormat
+ */
+export declare enum SecretImportFormat {
+    /**
+     * @generated from enum value: SECRET_IMPORT_FORMAT_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: SECRET_IMPORT_FORMAT_DOTENV = 1;
+     */
+    DOTENV = 1,
+    /**
+     * flat object of string values
+     *
+     * @generated from enum value: SECRET_IMPORT_FORMAT_JSON = 2;
+     */
+    JSON = 2
+}
+/**
+ * Describes the enum slipway.v1.SecretImportFormat.
+ */
+export declare const SecretImportFormatSchema: GenEnum<SecretImportFormat>;
+/**
+ * @generated from enum slipway.v1.KeyRotationMode
+ */
+export declare enum KeyRotationMode {
+    /**
+     * @generated from enum value: KEY_ROTATION_MODE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * rotate the KMS key and re-wrap every DEK (cheap, ciphertexts untouched)
+     *
+     * @generated from enum value: KEY_ROTATION_MODE_KEK = 1;
+     */
+    KEK = 1,
+    /**
+     * mint a new DEK; existing secrets are re-encrypted lazily or via reencrypt
+     *
+     * @generated from enum value: KEY_ROTATION_MODE_DEK = 2;
+     */
+    DEK = 2
+}
+/**
+ * Describes the enum slipway.v1.KeyRotationMode.
+ */
+export declare const KeyRotationModeSchema: GenEnum<KeyRotationMode>;
+/**
+ * @generated from service slipway.v1.SecretService
+ */
+export declare const SecretService: GenService<{
+    /**
+     * @generated from rpc slipway.v1.SecretService.ListSecrets
+     */
+    listSecrets: {
+        methodKind: "unary";
+        input: typeof ListSecretsRequestSchema;
+        output: typeof ListSecretsResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.GetSecret
+     */
+    getSecret: {
+        methodKind: "unary";
+        input: typeof GetSecretRequestSchema;
+        output: typeof GetSecretResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.CreateSecret
+     */
+    createSecret: {
+        methodKind: "unary";
+        input: typeof CreateSecretRequestSchema;
+        output: typeof CreateSecretResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.UpdateSecret
+     */
+    updateSecret: {
+        methodKind: "unary";
+        input: typeof UpdateSecretRequestSchema;
+        output: typeof UpdateSecretResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.DeleteSecret
+     */
+    deleteSecret: {
+        methodKind: "unary";
+        input: typeof DeleteSecretRequestSchema;
+        output: typeof DeleteSecretResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.RotateSecret
+     */
+    rotateSecret: {
+        methodKind: "unary";
+        input: typeof RotateSecretRequestSchema;
+        output: typeof RotateSecretResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.ListSecretVersions
+     */
+    listSecretVersions: {
+        methodKind: "unary";
+        input: typeof ListSecretVersionsRequestSchema;
+        output: typeof ListSecretVersionsResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.RollbackSecret
+     */
+    rollbackSecret: {
+        methodKind: "unary";
+        input: typeof RollbackSecretRequestSchema;
+        output: typeof RollbackSecretResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.ImportSecrets
+     */
+    importSecrets: {
+        methodKind: "unary";
+        input: typeof ImportSecretsRequestSchema;
+        output: typeof ImportSecretsResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.ListSecretProviders
+     */
+    listSecretProviders: {
+        methodKind: "unary";
+        input: typeof ListSecretProvidersRequestSchema;
+        output: typeof ListSecretProvidersResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.UpsertSecretProvider
+     */
+    upsertSecretProvider: {
+        methodKind: "unary";
+        input: typeof UpsertSecretProviderRequestSchema;
+        output: typeof UpsertSecretProviderResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.DeleteSecretProvider
+     */
+    deleteSecretProvider: {
+        methodKind: "unary";
+        input: typeof DeleteSecretProviderRequestSchema;
+        output: typeof DeleteSecretProviderResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.TestExternalRef
+     */
+    testExternalRef: {
+        methodKind: "unary";
+        input: typeof TestExternalRefRequestSchema;
+        output: typeof TestExternalRefResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.GetKeyring
+     */
+    getKeyring: {
+        methodKind: "unary";
+        input: typeof GetKeyringRequestSchema;
+        output: typeof GetKeyringResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.ConfigureKeyring
+     */
+    configureKeyring: {
+        methodKind: "unary";
+        input: typeof ConfigureKeyringRequestSchema;
+        output: typeof ConfigureKeyringResponseSchema;
+    };
+    /**
+     * @generated from rpc slipway.v1.SecretService.RotateKeyring
+     */
+    rotateKeyring: {
+        methodKind: "unary";
+        input: typeof RotateKeyringRequestSchema;
+        output: typeof RotateKeyringResponseSchema;
+    };
+}>;