@tailor-platform/sdk 2.32.0 → 2.33.0

package/dist/tailor-proto/src/tailor/v1/security_resource_pb.d.mts

@@ -0,0 +1,301 @@
+import { GenMessage } from "@bufbuild/protobuf/codegenv2";
+import { Message } from "@bufbuild/protobuf";
+import { Timestamp } from "@bufbuild/protobuf/wkt";
+//#region ../tailor-proto/src/tailor/v1/security_resource_pb.d.ts
+/**
+ * @generated from message tailor.v1.TailorDBTypeRef
+ */
+export declare type TailorDBTypeRef = Message<"tailor.v1.TailorDBTypeRef"> & {
+  /**
+   * @generated from field: string namespace = 1;
+   */
+  namespace: string;
+  /**
+   * @generated from field: string type = 2;
+   */
+  type: string;
+};
+/**
+ * @generated from message tailor.v1.IdPRef
+ */
+export declare type IdPRef = Message<"tailor.v1.IdPRef"> & {
+  /**
+   * @generated from field: string namespace = 1;
+   */
+  namespace: string;
+};
+/**
+ * @generated from message tailor.v1.ApplicationRef
+ */
+export declare type ApplicationRef = Message<"tailor.v1.ApplicationRef"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+};
+/**
+ * @generated from message tailor.v1.MachineUserRef
+ */
+export declare type MachineUserRef = Message<"tailor.v1.MachineUserRef"> & {
+  /**
+   * @generated from field: string name = 1;
+   */
+  name: string;
+};
+/**
+ * @generated from message tailor.v1.OrganizationRef
+ */
+export declare type OrganizationRef = Message<"tailor.v1.OrganizationRef"> & {};
+/**
+ * @generated from message tailor.v1.SecurityResource
+ */
+export declare type SecurityResource = Message<"tailor.v1.SecurityResource"> & {
+  /**
+   * Empty for organization-scoped resources.
+   *
+   * @generated from field: string workspace_id = 1;
+   */
+  workspaceId: string;
+  /**
+   * Immutable UUID of the resource; the key used for mutes.
+   *
+   * @generated from field: string resource_id = 2;
+   */
+  resourceId: string;
+  /**
+   * Display reference used to link to the resource.
+   *
+   * @generated from oneof tailor.v1.SecurityResource.ref
+   */
+  ref: {
+    /**
+     * @generated from field: tailor.v1.TailorDBTypeRef tailordb_type = 10;
+     */
+    value: TailorDBTypeRef;
+    case: "tailordbType";
+  } | {
+    /**
+     * @generated from field: tailor.v1.IdPRef idp = 11;
+     */
+    value: IdPRef;
+    case: "idp";
+  } | {
+    /**
+     * @generated from field: tailor.v1.ApplicationRef application = 12;
+     */
+    value: ApplicationRef;
+    case: "application";
+  } | {
+    /**
+     * @generated from field: tailor.v1.MachineUserRef machine_user = 14;
+     */
+    value: MachineUserRef;
+    case: "machineUser";
+  } | {
+    /**
+     * @generated from field: tailor.v1.OrganizationRef organization = 17;
+     */
+    value: OrganizationRef;
+    case: "organization";
+  } | {
+    case: undefined;
+    value?: undefined;
+  };
+};
+/**
+ * @generated from message tailor.v1.SecurityCheck
+ */
+export declare type SecurityCheck = Message<"tailor.v1.SecurityCheck"> & {
+  /**
+   * @generated from field: tailor.v1.SecurityCheckType type = 1;
+   */
+  type: SecurityCheckType;
+  /**
+   * @generated from field: tailor.v1.SecuritySeverity severity = 2;
+   */
+  severity: SecuritySeverity;
+  /**
+   * @generated from field: string title = 3;
+   */
+  title: string;
+  /**
+   * @generated from field: string description = 4;
+   */
+  description: string;
+  /**
+   * @generated from field: string remediation = 5;
+   */
+  remediation: string;
+  /**
+   * @generated from field: tailor.v1.SecurityCheckStatus status = 6;
+   */
+  status: SecurityCheckStatus;
+  /**
+   * Number of unmuted findings.
+   *
+   * @generated from field: int64 finding_count = 7;
+   */
+  findingCount: bigint;
+  /**
+   * @generated from field: int64 muted_finding_count = 8;
+   */
+  mutedFindingCount: bigint;
+  /**
+   * @generated from field: google.protobuf.Timestamp evaluated_at = 9;
+   */
+  evaluatedAt?: Timestamp;
+};
+/**
+ * @generated from message tailor.v1.SecurityFinding
+ */
+export declare type SecurityFinding = Message<"tailor.v1.SecurityFinding"> & {
+  /**
+   * @generated from field: tailor.v1.SecurityCheckType check_type = 1;
+   */
+  checkType: SecurityCheckType;
+  /**
+   * @generated from field: tailor.v1.SecuritySeverity severity = 2;
+   */
+  severity: SecuritySeverity;
+  /**
+   * @generated from field: tailor.v1.SecurityResource resource = 3;
+   */
+  resource?: SecurityResource;
+  /**
+   * @generated from field: string detail = 4;
+   */
+  detail: string;
+  /**
+   * @generated from field: bool muted = 5;
+   */
+  muted: boolean;
+  /**
+   * @generated from field: string mute_reason = 6;
+   */
+  muteReason: string;
+};
+/**
+ * @generated from message tailor.v1.SecurityFindingMute
+ */
+export declare type SecurityFindingMute = Message<"tailor.v1.SecurityFindingMute"> & {
+  /**
+   * @generated from field: string organization_id = 1;
+   */
+  organizationId: string;
+  /**
+   * @generated from field: tailor.v1.SecurityCheckType check_type = 2;
+   */
+  checkType: SecurityCheckType;
+  /**
+   * @generated from field: tailor.v1.SecurityResource resource = 3;
+   */
+  resource?: SecurityResource;
+  /**
+   * @generated from field: string reason = 4;
+   */
+  reason: string;
+  /**
+   * @generated from field: string created_by = 5;
+   */
+  createdBy: string;
+  /**
+   * @generated from field: google.protobuf.Timestamp create_time = 6;
+   */
+  createTime?: Timestamp;
+};
+/**
+ * SecurityCheckType identifies a security check.
+ *
+ * @generated from enum tailor.v1.SecurityCheckType
+ */
+export declare enum SecurityCheckType {
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_TAILORDB_TYPE_ALLOW_ALL = 1;
+   */
+  TAILORDB_TYPE_ALLOW_ALL = 1,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_IDP_MFA_NOT_REQUIRED = 2;
+   */
+  IDP_MFA_NOT_REQUIRED = 2,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_IDP_EMAIL_DOMAIN_UNRESTRICTED = 3;
+   */
+  IDP_EMAIL_DOMAIN_UNRESTRICTED = 3,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_GATEWAY_CORS_WILDCARD = 4;
+   */
+  GATEWAY_CORS_WILDCARD = 4,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_GATEWAY_INTROSPECTION_ENABLED = 5;
+   */
+  GATEWAY_INTROSPECTION_ENABLED = 5,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_ROUTING_ORG_IP_RESTRICTION_MISSING = 6;
+   */
+  ROUTING_ORG_IP_RESTRICTION_MISSING = 6,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_AUTH_MACHINE_USER_ORPHANED = 7;
+   */
+  AUTH_MACHINE_USER_ORPHANED = 7,
+  /**
+   * @generated from enum value: SECURITY_CHECK_TYPE_PAM_MACHINE_USER_ADMIN = 13;
+   */
+  PAM_MACHINE_USER_ADMIN = 13
+}
+/**
+ * @generated from enum tailor.v1.SecuritySeverity
+ */
+export declare enum SecuritySeverity {
+  /**
+   * @generated from enum value: SECURITY_SEVERITY_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * @generated from enum value: SECURITY_SEVERITY_INFO = 1;
+   */
+  INFO = 1,
+  /**
+   * @generated from enum value: SECURITY_SEVERITY_LOW = 2;
+   */
+  LOW = 2,
+  /**
+   * @generated from enum value: SECURITY_SEVERITY_MEDIUM = 3;
+   */
+  MEDIUM = 3,
+  /**
+   * @generated from enum value: SECURITY_SEVERITY_HIGH = 4;
+   */
+  HIGH = 4
+}
+/**
+ * @generated from enum tailor.v1.SecurityCheckStatus
+ */
+export declare enum SecurityCheckStatus {
+  /**
+   * @generated from enum value: SECURITY_CHECK_STATUS_UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+  /**
+   * No unmuted findings.
+   *
+   * @generated from enum value: SECURITY_CHECK_STATUS_PASS = 1;
+   */
+  PASS = 1,
+  /**
+   * At least one unmuted finding.
+   *
+   * @generated from enum value: SECURITY_CHECK_STATUS_FAIL = 2;
+   */
+  FAIL = 2,
+  /**
+   * The service that evaluates this check did not respond.
+   *
+   * @generated from enum value: SECURITY_CHECK_STATUS_UNAVAILABLE = 3;
+   */
+  UNAVAILABLE = 3
+}
+//#endregion

package/dist/tailor-proto/src/tailor/v1/service_pb.d.mts

@@ -1,4 +1,5 @@
 import { AddOrganizationTeamMemberRequestSchema, AddOrganizationTeamMemberResponseSchema, CreateOrganizationFolderRequestSchema, CreateOrganizationFolderResponseSchema, CreateOrganizationTeamRequestSchema, CreateOrganizationTeamResponseSchema, CreateWorkspaceRequestSchema, CreateWorkspaceResponseSchema, DeleteOrganizationFolderIPRestrictionRequestSchema, DeleteOrganizationFolderIPRestrictionResponseSchema, DeleteOrganizationFolderRequestSchema, DeleteOrganizationFolderResponseSchema, DeleteOrganizationIPRestrictionRequestSchema, DeleteOrganizationIPRestrictionResponseSchema, DeleteOrganizationTeamRequestSchema, DeleteOrganizationTeamResponseSchema, DeleteWorkspaceRequestSchema, DeleteWorkspaceResponseSchema, GetOrganizationAccessRequestSchema, GetOrganizationAccessResponseSchema, GetOrganizationFolderAccessRequestSchema, GetOrganizationFolderAccessResponseSchema, GetOrganizationFolderIPRestrictionRequestSchema, GetOrganizationFolderIPRestrictionResponseSchema, GetOrganizationFolderRequestSchema, GetOrganizationFolderResponseSchema, GetOrganizationIPRestrictionRequestSchema, GetOrganizationIPRestrictionResponseSchema, GetOrganizationRequestSchema, GetOrganizationResponseSchema, GetOrganizationTeamMemberRequestSchema, GetOrganizationTeamMemberResponseSchema, GetOrganizationTeamRequestSchema, GetOrganizationTeamResponseSchema, GetPlatformAccountPlanRequestSchema, GetPlatformAccountPlanResponseSchema, GetWorkspacePlatformUserRequestSchema, GetWorkspacePlatformUserResponseSchema, GetWorkspaceRequestSchema, GetWorkspaceResponseSchema, GetWorkspaceRoleRequestSchema, GetWorkspaceRoleResponseSchema, GrantOrganizationAccessRequestSchema, GrantOrganizationAccessResponseSchema, GrantOrganizationFolderAccessRequestSchema, GrantOrganizationFolderAccessResponseSchema, InviteWorkspacePlatformUserRequestSchema, InviteWorkspacePlatformUserResponseSchema, ListAvailableWorkspacePlatformUserRolesRequestSchema, ListAvailableWorkspacePlatformUserRolesResponseSchema, ListAvailableWorkspaceRegionsRequestSchema, ListAvailableWorkspaceRegionsResponseSchema, ListOrganizationAccessesRequestSchema, ListOrganizationAccessesResponseSchema, ListOrganizationFolderAccessesRequestSchema, ListOrganizationFolderAccessesResponseSchema, ListOrganizationFoldersRequestSchema, ListOrganizationFoldersResponseSchema, ListOrganizationTeamMembersRequestSchema, ListOrganizationTeamMembersResponseSchema, ListOrganizationTeamsRequestSchema, ListOrganizationTeamsResponseSchema, ListOrganizationWorkspacesRequestSchema, ListOrganizationWorkspacesResponseSchema, ListOrganizationsRequestSchema, ListOrganizationsResponseSchema, ListUserOrganizationsRequestSchema, ListUserOrganizationsResponseSchema, ListWorkspacePlatformUsersRequestSchema, ListWorkspacePlatformUsersResponseSchema, ListWorkspacesRequestSchema, ListWorkspacesResponseSchema, RemoveOrganizationTeamMemberRequestSchema, RemoveOrganizationTeamMemberResponseSchema, RemoveWorkspacePlatformUserRequestSchema, RemoveWorkspacePlatformUserResponseSchema, RestoreWorkspaceRequestSchema, RestoreWorkspaceResponseSchema, RevokeOrganizationAccessRequestSchema, RevokeOrganizationAccessResponseSchema, RevokeOrganizationFolderAccessRequestSchema, RevokeOrganizationFolderAccessResponseSchema, UpdateOrganizationAccessRequestSchema, UpdateOrganizationAccessResponseSchema, UpdateOrganizationFolderAccessRequestSchema, UpdateOrganizationFolderAccessResponseSchema, UpdateOrganizationFolderRequestSchema, UpdateOrganizationFolderResponseSchema, UpdateOrganizationRequestSchema, UpdateOrganizationResponseSchema, UpdateOrganizationTeamMemberRequestSchema, UpdateOrganizationTeamMemberResponseSchema, UpdateOrganizationTeamRequestSchema, UpdateOrganizationTeamResponseSchema, UpdateWorkspacePlatformUserRequestSchema, UpdateWorkspacePlatformUserResponseSchema, UpdateWorkspaceRequestSchema, UpdateWorkspaceResponseSchema, UpsertOrganizationFolderIPRestrictionRequestSchema, UpsertOrganizationFolderIPRestrictionResponseSchema, UpsertOrganizationIPRestrictionRequestSchema, UpsertOrganizationIPRestrictionResponseSchema } from "./workspace_pb.mjs";
+import { CreateOrganizationSecurityFindingMuteRequestSchema, CreateOrganizationSecurityFindingMuteResponseSchema, DeleteOrganizationSecurityFindingMuteRequestSchema, DeleteOrganizationSecurityFindingMuteResponseSchema, ListOrganizationSecurityChecksRequestSchema, ListOrganizationSecurityChecksResponseSchema, ListOrganizationSecurityFindingMutesRequestSchema, ListOrganizationSecurityFindingMutesResponseSchema, ListOrganizationSecurityFindingsRequestSchema, ListOrganizationSecurityFindingsResponseSchema } from "./security_pb.mjs";
 import { CloneApplicationDataRequestSchema, CloneApplicationDataResponseSchema, CreateApplicationRequestSchema, CreateApplicationResponseSchema, DeleteApplicationRequestSchema, DeleteApplicationResponseSchema, GetApplicationRequestSchema, GetApplicationResponseSchema, GetApplicationSchemaHealthRequestSchema, GetApplicationSchemaHealthResponseSchema, GetCloneApplicationDataOperationRequestSchema, GetCloneApplicationDataOperationResponseSchema, ListApplicationsRequestSchema, ListApplicationsResponseSchema, UpdateApplicationRequestSchema, UpdateApplicationResponseSchema } from "./application_pb.mjs";
 import { CreateAIGatewayRequestSchema, CreateAIGatewayResponseSchema, DeleteAIGatewayRequestSchema, DeleteAIGatewayResponseSchema, GetAIGatewayRequestSchema, GetAIGatewayResponseSchema, ListAIGatewaysRequestSchema, ListAIGatewaysResponseSchema, UpdateAIGatewayRequestSchema, UpdateAIGatewayResponseSchema } from "./aigateway_pb.mjs";
 import { ComposeTailorDBSDLRequestSchema, ComposeTailorDBSDLResponseSchema, CreateTailorDBGQLPermissionRequestSchema, CreateTailorDBGQLPermissionResponseSchema, CreateTailorDBServiceRequestSchema, CreateTailorDBServiceResponseSchema, CreateTailorDBTypeRequestSchema, CreateTailorDBTypeResponseSchema, DeleteTailorDBGQLPermissionRequestSchema, DeleteTailorDBGQLPermissionResponseSchema, DeleteTailorDBServiceRequestSchema, DeleteTailorDBServiceResponseSchema, DeleteTailorDBTypeRequestSchema, DeleteTailorDBTypeResponseSchema, GetTailorDBGQLPermissionRequestSchema, GetTailorDBGQLPermissionResponseSchema, GetTailorDBServiceRequestSchema, GetTailorDBServiceResponseSchema, GetTailorDBTypeRequestSchema, GetTailorDBTypeResponseSchema, ListTailorDBGQLPermissionsRequestSchema, ListTailorDBGQLPermissionsResponseSchema, ListTailorDBServicesRequestSchema, ListTailorDBServicesResponseSchema, ListTailorDBTypesRequestSchema, ListTailorDBTypesResponseSchema, TruncateTailorDBTypeRequestSchema, TruncateTailorDBTypeResponseSchema, TruncateTailorDBTypesRequestSchema, TruncateTailorDBTypesResponseSchema, UpdateTailorDBGQLPermissionRequestSchema, UpdateTailorDBGQLPermissionResponseSchema, UpdateTailorDBServiceRequestSchema, UpdateTailorDBServiceResponseSchema, UpdateTailorDBTypeRequestSchema, UpdateTailorDBTypeResponseSchema } from "./tailordb_pb.mjs";
@@ -12,7 +13,7 @@ import { CancelJobFunctionExecutionRequestSchema, CancelJobFunctionExecutionResp
 import { CreateFunctionRegistryRequestSchema, CreateFunctionRegistryResponseSchema, DeleteFunctionRegistryRequestSchema, DeleteFunctionRegistryResponseSchema, DownloadFunctionRegistryScriptRequestSchema, DownloadFunctionRegistryScriptResponseSchema, GetFunctionRegistryRequestSchema, GetFunctionRegistryResponseSchema, ListFunctionRegistriesRequestSchema, ListFunctionRegistriesResponseSchema, UpdateFunctionRegistryRequestSchema, UpdateFunctionRegistryResponseSchema } from "./function_registry_pb.mjs";
 import { ListMeterAITokenUsagesRequestSchema, ListMeterAITokenUsagesResponseSchema, ListMeterEventCountsRequestSchema, ListMeterEventCountsResponseSchema, ListMeterExecutionCountsRequestSchema, ListMeterExecutionCountsResponseSchema, ListMeterRequestCountsRequestSchema, ListMeterRequestCountsResponseSchema } from "./meter_pb.mjs";
 import { CreateIdPClientRequestSchema, CreateIdPClientResponseSchema, CreateIdPServiceRequestSchema, CreateIdPServiceResponseSchema, DeleteIdPClientRequestSchema, DeleteIdPClientResponseSchema, DeleteIdPServiceRequestSchema, DeleteIdPServiceResponseSchema, GetIdPClientRequestSchema, GetIdPClientResponseSchema, GetIdPServiceRequestSchema, GetIdPServiceResponseSchema, ListIdPClientsRequestSchema, ListIdPClientsResponseSchema, ListIdPServicesRequestSchema, ListIdPServicesResponseSchema, UpdateIdPServiceRequestSchema, UpdateIdPServiceResponseSchema } from "./idp_pb.mjs";
-import { AddCustomDomainRequestSchema, AddCustomDomainResponseSchema, CreateDeploymentRequestSchema, CreateDeploymentResponseSchema, CreateStaticWebsiteRequestSchema, CreateStaticWebsiteResponseSchema, DeleteStaticWebsiteRequestSchema, DeleteStaticWebsiteResponseSchema, GetCustomDomainRequestSchema, GetCustomDomainResponseSchema, GetStaticWebsiteRequestSchema, GetStaticWebsiteResponseSchema, ListCustomDomainsRequestSchema, ListCustomDomainsResponseSchema, ListStaticWebsitesRequestSchema, ListStaticWebsitesResponseSchema, PublishDeploymentRequestSchema, PublishDeploymentResponseSchema, RemoveCustomDomainRequestSchema, RemoveCustomDomainResponseSchema, UpdateStaticWebsiteRequestSchema, UpdateStaticWebsiteResponseSchema, UploadFileRequestSchema, UploadFileResponseSchema } from "./staticwebsite_pb.mjs";
+import { AcceptCustomDomainTransferRequestSchema, AcceptCustomDomainTransferResponseSchema, AddCustomDomainRequestSchema, AddCustomDomainResponseSchema, CancelCustomDomainTransferRequestSchema, CancelCustomDomainTransferResponseSchema, CreateDeploymentRequestSchema, CreateDeploymentResponseSchema, CreateStaticWebsiteRequestSchema, CreateStaticWebsiteResponseSchema, DeleteStaticWebsiteRequestSchema, DeleteStaticWebsiteResponseSchema, GetCustomDomainRequestSchema, GetCustomDomainResponseSchema, GetCustomDomainTransferRequestSchema, GetCustomDomainTransferResponseSchema, GetStaticWebsiteRequestSchema, GetStaticWebsiteResponseSchema, ListCustomDomainTransfersRequestSchema, ListCustomDomainTransfersResponseSchema, ListCustomDomainsRequestSchema, ListCustomDomainsResponseSchema, ListStaticWebsitesRequestSchema, ListStaticWebsitesResponseSchema, PublishDeploymentRequestSchema, PublishDeploymentResponseSchema, RemoveCustomDomainRequestSchema, RemoveCustomDomainResponseSchema, RequestCustomDomainTransferRequestSchema, RequestCustomDomainTransferResponseSchema, UpdateStaticWebsiteRequestSchema, UpdateStaticWebsiteResponseSchema, UploadFileRequestSchema, UploadFileResponseSchema } from "./staticwebsite_pb.mjs";
 import { CancelWorkflowExecutionRequestSchema, CancelWorkflowExecutionResponseSchema, CreateWorkflowJobFunctionExecutionPolicyRequestSchema, CreateWorkflowJobFunctionExecutionPolicyResponseSchema, CreateWorkflowJobFunctionRequestSchema, CreateWorkflowJobFunctionResponseSchema, CreateWorkflowRequestSchema, CreateWorkflowResponseSchema, DeleteWorkflowJobFunctionExecutionPolicyRequestSchema, DeleteWorkflowJobFunctionExecutionPolicyResponseSchema, DeleteWorkflowJobFunctionRequestSchema, DeleteWorkflowJobFunctionResponseSchema, DeleteWorkflowRequestSchema, DeleteWorkflowResponseSchema, GetWorkflowByNameRequestSchema, GetWorkflowByNameResponseSchema, GetWorkflowExecutionRequestSchema, GetWorkflowExecutionResponseSchema, GetWorkflowJobFunctionByNameRequestSchema, GetWorkflowJobFunctionByNameResponseSchema, GetWorkflowJobFunctionExecutionPolicyByKeyRequestSchema, GetWorkflowJobFunctionExecutionPolicyByKeyResponseSchema, GetWorkflowJobFunctionExecutionPolicyRequestSchema, GetWorkflowJobFunctionExecutionPolicyResponseSchema, GetWorkflowJobFunctionRequestSchema, GetWorkflowJobFunctionResponseSchema, GetWorkflowRequestSchema, GetWorkflowResponseSchema, ListWorkflowExecutionsRequestSchema, ListWorkflowExecutionsResponseSchema, ListWorkflowJobFunctionExecutionPoliciesRequestSchema, ListWorkflowJobFunctionExecutionPoliciesResponseSchema, ListWorkflowJobFunctionsRequestSchema, ListWorkflowJobFunctionsResponseSchema, ListWorkflowsRequestSchema, ListWorkflowsResponseSchema, ResumeWorkflowExecutionRequestSchema, ResumeWorkflowExecutionResponseSchema, StartWorkflowRequestSchema, StartWorkflowResponseSchema, TestResumeWorkflowRequestSchema, TestResumeWorkflowResponseSchema, TestStartWorkflowRequestSchema, TestStartWorkflowResponseSchema, UpdateWorkflowJobFunctionExecutionPolicyRequestSchema, UpdateWorkflowJobFunctionExecutionPolicyResponseSchema, UpdateWorkflowJobFunctionRequestSchema, UpdateWorkflowJobFunctionResponseSchema, UpdateWorkflowRequestSchema, UpdateWorkflowResponseSchema } from "./workflow_pb.mjs";
 import { BulkSetMetadataRequestSchema, BulkSetMetadataResponseSchema, GetMetadataRequestSchema, GetMetadataResponseSchema, ListMetadataRequestSchema, ListMetadataResponseSchema, SetMetadataRequestSchema, SetMetadataResponseSchema } from "./metadata_pb.mjs";
 import { CreateOTLPExporterRequestSchema, CreateOTLPExporterResponseSchema, CreateResourceAttributesConfigRequestSchema, CreateResourceAttributesConfigResponseSchema, DeleteOTLPExporterRequestSchema, DeleteOTLPExporterResponseSchema, DeleteResourceAttributesConfigRequestSchema, DeleteResourceAttributesConfigResponseSchema, GetOTLPExporterRequestSchema, GetOTLPExporterResponseSchema, GetResourceAttributesConfigRequestSchema, GetResourceAttributesConfigResponseSchema, ListOTLPExportersRequestSchema, ListOTLPExportersResponseSchema, TestOTLPExporterRequestSchema, TestOTLPExporterResponseSchema, UpdateOTLPExporterRequestSchema, UpdateOTLPExporterResponseSchema, UpdateResourceAttributesConfigRequestSchema, UpdateResourceAttributesConfigResponseSchema } from "./telemetryrouter_pb.mjs";
@@ -667,6 +668,98 @@ export declare const OperatorService: GenService<{
     input: typeof DeleteOrganizationFolderIPRestrictionRequestSchema;
     output: typeof DeleteOrganizationFolderIPRestrictionResponseSchema;
   };
+  /**
+   * ListOrganizationSecurityChecks evaluates every security check for the
+   * workspaces in an organization and returns one result per check. A check
+   * whose evaluating service fails is returned with status UNAVAILABLE.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - PermissionDenied: caller does not have permission on the organization
+   * - NotFound: organization does not exist or can not be accessed
+   *
+   * @generated from rpc tailor.v1.OperatorService.ListOrganizationSecurityChecks
+   */
+  listOrganizationSecurityChecks: {
+    methodKind: "unary";
+    input: typeof ListOrganizationSecurityChecksRequestSchema;
+    output: typeof ListOrganizationSecurityChecksResponseSchema;
+  };
+  /**
+   * ListOrganizationSecurityFindings returns the findings of one security
+   * check across the workspaces in an organization.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - PermissionDenied: caller does not have permission on the organization
+   * - NotFound: organization does not exist or can not be accessed
+   * - Unavailable: the service that evaluates the check did not respond
+   *
+   * @generated from rpc tailor.v1.OperatorService.ListOrganizationSecurityFindings
+   */
+  listOrganizationSecurityFindings: {
+    methodKind: "unary";
+    input: typeof ListOrganizationSecurityFindingsRequestSchema;
+    output: typeof ListOrganizationSecurityFindingsResponseSchema;
+  };
+  /**
+   * CreateOrganizationSecurityFindingMute mutes a security finding so it no
+   * longer counts toward its check's status.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - PermissionDenied: caller does not have permission on the organization,
+   *   or the caller is a machine user
+   * - NotFound: organization does not exist or can not be accessed, or the
+   *   resource has no current finding for the check
+   * - AlreadyExists: the finding is already muted
+   * - Unavailable: the service that evaluates the check did not respond
+   *
+   * @generated from rpc tailor.v1.OperatorService.CreateOrganizationSecurityFindingMute
+   */
+  createOrganizationSecurityFindingMute: {
+    methodKind: "unary";
+    input: typeof CreateOrganizationSecurityFindingMuteRequestSchema;
+    output: typeof CreateOrganizationSecurityFindingMuteResponseSchema;
+  };
+  /**
+   * DeleteOrganizationSecurityFindingMute unmutes a security finding.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - PermissionDenied: caller does not have permission on the organization,
+   *   or the caller is a machine user
+   * - NotFound: organization does not exist or can not be accessed, or the
+   *   finding is not muted
+   *
+   * @generated from rpc tailor.v1.OperatorService.DeleteOrganizationSecurityFindingMute
+   */
+  deleteOrganizationSecurityFindingMute: {
+    methodKind: "unary";
+    input: typeof DeleteOrganizationSecurityFindingMuteRequestSchema;
+    output: typeof DeleteOrganizationSecurityFindingMuteResponseSchema;
+  };
+  /**
+   * ListOrganizationSecurityFindingMutes returns the muted security findings
+   * in an organization.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - PermissionDenied: caller does not have permission on the organization
+   * - NotFound: organization does not exist or can not be accessed
+   *
+   * @generated from rpc tailor.v1.OperatorService.ListOrganizationSecurityFindingMutes
+   */
+  listOrganizationSecurityFindingMutes: {
+    methodKind: "unary";
+    input: typeof ListOrganizationSecurityFindingMutesRequestSchema;
+    output: typeof ListOrganizationSecurityFindingMutesResponseSchema;
+  };
   /**
    * CreateOrganizationTeam creates a team in an organization.
    *
@@ -934,7 +1027,6 @@ export declare const OperatorService: GenService<{
    *
    * [Errors]
    * - Unauthenticated: token is missing, expired, or invalid
-   * - Unimplemented: feature flag is disabled
    * - InvalidArgument: request is invalid
    * - NotFound: workspace or application does not exist or cannot be accessed
    * - FailedPrecondition: cross-region clone, namespace mismatch, or target is not empty
@@ -2918,6 +3010,8 @@ export declare const OperatorService: GenService<{
    * - Unauthenticated: token is missing, expired, or invalid
    * - InvalidArgument: request is invalid
    * - NotFound: staticwebsite does not exist or can not be accessed
+   * - FailedPrecondition: one of the staticwebsite's custom domains has a pending transfer,
+   *   which must be cancelled first
    *
    * @generated from rpc tailor.v1.OperatorService.DeleteStaticWebsite
    */
@@ -2963,9 +3057,16 @@ export declare const OperatorService: GenService<{
    * - Unauthenticated: token is missing, expired, or invalid
    * - InvalidArgument: request is invalid or domain format is rejected
    * - NotFound: static website does not exist
-   * - AlreadyExists: domain is already registered
-   * - ResourceExhausted: maximum number of custom domains reached
-   * - FailedPrecondition: domain already has an active TLS subscription
+   * - AlreadyExists: domain belongs to another workspace, or to another static website of
+   *   this workspace. A domain this static website already holds, and a domain offered to
+   *   this workspace by a transfer, are completed instead and returned with OK — the
+   *   response carries the transfer when one was completed or matched.
+   * - ResourceExhausted: maximum number of custom domains reached (a new registration only;
+   *   a domain already attached here is not measured against the limit again)
+   * - FailedPrecondition: domain already has an active TLS subscription; or, when the call
+   *   completes a transfer addressed to this workspace: the source cache purge is not yet
+   *   confirmed, this static website has no active deployment or is disabled, the source is
+   *   in another region, or the offer is stale
    *
    * @generated from rpc tailor.v1.OperatorService.AddCustomDomain
    */
@@ -3011,7 +3112,8 @@ export declare const OperatorService: GenService<{
    * - Unauthenticated: token is missing, expired, or invalid
    * - InvalidArgument: request is invalid
    * - NotFound: custom domain does not exist
-   * - FailedPrecondition: domain DNS is still active, remove DNS record before deleting
+   * - FailedPrecondition: domain DNS is still active, remove DNS record before deleting; or
+   *   the domain has a pending transfer, which must be cancelled first
    *
    * @generated from rpc tailor.v1.OperatorService.RemoveCustomDomain
    */
@@ -3020,6 +3122,96 @@ export declare const OperatorService: GenService<{
     input: typeof RemoveCustomDomainRequestSchema;
     output: typeof RemoveCustomDomainResponseSchema;
   };
+  /**
+   * RequestCustomDomainTransfer offers a custom domain owned by this workspace to another workspace.
+   * The transfer completes when the target workspace adds the domain to one of its static websites;
+   * the Fastly registration and TLS subscription move with the domain, so DNS does not change.
+   * Idempotent for an identical (domain, target) pair while the offer is pending.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - NotFound: custom domain does not exist in this workspace, or target workspace does not exist
+   * - PermissionDenied: can view workspace but no permission to delete resources
+   * - FailedPrecondition: domain is not certificate-issued, a transfer to another workspace is pending,
+   *   or the target is in another region
+   *
+   * @generated from rpc tailor.v1.OperatorService.RequestCustomDomainTransfer
+   */
+  requestCustomDomainTransfer: {
+    methodKind: "unary";
+    input: typeof RequestCustomDomainTransferRequestSchema;
+    output: typeof RequestCustomDomainTransferResponseSchema;
+  };
+  /**
+   * CancelCustomDomainTransfer withdraws a pending offer. Only the source workspace may cancel.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - NotFound: no live offer for this domain in this workspace
+   * - PermissionDenied: can view workspace but no permission to delete resources
+   *
+   * @generated from rpc tailor.v1.OperatorService.CancelCustomDomainTransfer
+   */
+  cancelCustomDomainTransfer: {
+    methodKind: "unary";
+    input: typeof CancelCustomDomainTransferRequestSchema;
+    output: typeof CancelCustomDomainTransferResponseSchema;
+  };
+  /**
+   * AcceptCustomDomainTransfer completes a pending offer addressed to this workspace by attaching the
+   * domain to one of its static websites. AddCustomDomain performs the same completion implicitly.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid, or the domain already belongs to that static website
+   * - NotFound: no live offer addressed to this workspace, or static website does not exist
+   * - PermissionDenied: can view workspace but no permission to create resources
+   * - ResourceExhausted: static website reached the maximum number of custom domains
+   * - FailedPrecondition: source and target are in different regions, the target has no active
+   *   deployment or is disabled, the domain is no longer certificate-issued, the offer is stale, or the
+   *   source cache purge is not yet confirmed
+   *
+   * @generated from rpc tailor.v1.OperatorService.AcceptCustomDomainTransfer
+   */
+  acceptCustomDomainTransfer: {
+    methodKind: "unary";
+    input: typeof AcceptCustomDomainTransferRequestSchema;
+    output: typeof AcceptCustomDomainTransferResponseSchema;
+  };
+  /**
+   * GetCustomDomainTransfer returns the latest transfer record for a domain in which this workspace is
+   * the source or the target.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - NotFound: no transfer for this domain involves this workspace
+   *
+   * @generated from rpc tailor.v1.OperatorService.GetCustomDomainTransfer
+   */
+  getCustomDomainTransfer: {
+    methodKind: "unary";
+    input: typeof GetCustomDomainTransferRequestSchema;
+    output: typeof GetCustomDomainTransferResponseSchema;
+  };
+  /**
+   * ListCustomDomainTransfers lists transfers in which this workspace is the source or the target,
+   * newest first, optionally filtered by status.
+   *
+   * [Errors]
+   * - Unauthenticated: token is missing, expired, or invalid
+   * - InvalidArgument: request is invalid
+   * - NotFound: workspace does not exist or can not be accessed
+   *
+   * @generated from rpc tailor.v1.OperatorService.ListCustomDomainTransfers
+   */
+  listCustomDomainTransfers: {
+    methodKind: "unary";
+    input: typeof ListCustomDomainTransfersRequestSchema;
+    output: typeof ListCustomDomainTransfersResponseSchema;
+  };
   /**
    * CreateDeployment creates a new deployment.
    *
@@ -3507,8 +3699,8 @@ export declare const OperatorService: GenService<{
     output: typeof BulkSetMetadataResponseSchema;
   };
   /**
-   * ListMetadata finds resources in a workspace whose labels match all of
-   * the given key-value pairs.
+   * ListMetadata lists labeled resources in a workspace, optionally narrowed
+   * to those whose labels match all of the given key-value pairs.
    *
    * [Errors]
    * - Unauthenticated: token is missing, expired, or invalid