@toshicloud/sdk 0.3.0 → 0.3.1

package/README.md

@@ -73,16 +73,18 @@ server and any CA come from the caller.
 ### The client's shape
 
 The client has one field per Workspace API service: `project`, `secret`,
-`webhook`, `display`, `channel`, `recording`, `volume`, `artifact` and
-`artifactUpload`, each holding that service's generated client.
+`webhook`, `display`, `channel`, `recording`, `volume`, `artifact`,
+`artifactUpload`, `workspace`, `hostJob`, `host`, `token`, `auditEvent`,
+`filler` and `storageProvider`, each holding that service's generated
+client.
 `workload` holds `WorkloadService`'s calls, grouped by the type they
 name: `workload.jobs`, `workload.sandboxes` and `workload.services`, one
 method for each call (`create`, `get`, `list`, `update`, `delete`,
 `wait`, `watch`, and `cancel` on a job, `execute` on a sandbox, `start`,
 `stop`, `setMode`, `listRuns`, `wake`, `hold` and `release` on a service). The calls that
-span the three types sit on `workload` itself: `watchEvents` and
-`waitOperation`. `run` sits at the top of the client, as `toshi run`
-sits at the top of the CLI.
+span the three types sit on `workload` itself: `listEvents`, `watchEvents`,
+`getOperation` and `waitOperation`. `run` sits at the top of the client, as
+`toshi run` sits at the top of the CLI.
 
 ```ts
 const { jobs } = await toshi.workload.jobs.list({ pageSize: 10 });
@@ -107,6 +109,11 @@ from a server error.
 - `workload.jobs.wait(req)`, `workload.sandboxes.wait(req)` and
   `workload.services.wait(req)` ask again until the workload reaches the
   state; `workload.waitOperation(req)` asks until the operation is done.
+- `workload.getOperation(req)` returns one operation by id: a call that
+  takes long hands one back, and this asks for it again.
+- `workload.listEvents(req)` returns the events after a cursor, oldest
+  first, a page at a time, for a client that polls or catches up after
+  downtime; `workload.watchEvents(req)` is the live form.
 - `workload.jobs.watch(req)`, `workload.sandboxes.watch(req)`,
   `workload.services.watch(req)`, `workload.watchEvents(req)` and
   `workload.jobs.watchOutput(req)` resolve to a watch you read with

package/dist/client.d.ts

@@ -1,17 +1,24 @@
 import type { MessageInitShape } from "@bufbuild/protobuf";
 import type { Client, Interceptor, Transport } from "@connectrpc/connect";
 import { ArtifactService, ArtifactUploadService } from "./gen/toshi/workspace/v1/artifacts_pb.js";
+import { AuditEventService } from "./gen/toshi/workspace/v1/audit_events_pb.js";
 import { ChannelService } from "./gen/toshi/workspace/v1/channels_pb.js";
 import { DisplayService } from "./gen/toshi/workspace/v1/display_pb.js";
+import { FillerService } from "./gen/toshi/workspace/v1/fillers_pb.js";
+import { HostJobService } from "./gen/toshi/workspace/v1/hostjobs_pb.js";
+import { HostService } from "./gen/toshi/workspace/v1/hosts_pb.js";
 import { ProjectService } from "./gen/toshi/workspace/v1/projects_pb.js";
 import { RecordingService } from "./gen/toshi/workspace/v1/recordings_pb.js";
 import { SecretService } from "./gen/toshi/workspace/v1/secrets_pb.js";
+import { StorageProviderService } from "./gen/toshi/workspace/v1/storage_providers_pb.js";
+import { TokenService } from "./gen/toshi/workspace/v1/tokens_pb.js";
 import { VolumeService } from "./gen/toshi/workspace/v1/volumes_pb.js";
 import { WebhookService } from "./gen/toshi/workspace/v1/webhook_pb.js";
+import { WorkspaceService } from "./gen/toshi/workspace/v1/workspace_service_pb.js";
 import { CancelJobRequestSchema, CreateJobRequestSchema, CreateSandboxRequestSchema, CreateServiceRequestSchema, DeleteJobRequestSchema, DeleteSandboxRequestSchema, DeleteServiceRequestSchema, GetJobRequestSchema, GetSandboxRequestSchema, GetServiceRequestSchema, ListJobsRequestSchema, ListSandboxesRequestSchema, ListServicesRequestSchema, UpdateJobRequestSchema, UpdateSandboxRequestSchema, UpdateServiceRequestSchema, WaitJobRequestSchema, WaitSandboxRequestSchema, WaitServiceRequestSchema, WatchJobsRequestSchema, WatchSandboxesRequestSchema, WatchServicesRequestSchema } from "./gen/toshi/workspace/v1/workloads_pb.js";
 import type { CancelJobResponse, CreateJobResponse, CreateSandboxResponse, CreateServiceResponse, DeleteJobResponse, DeleteSandboxResponse, DeleteServiceResponse, GetJobResponse, GetSandboxResponse, GetServiceResponse, ListJobsResponse, ListSandboxesResponse, ListServicesResponse, UpdateJobResponse, UpdateSandboxResponse, UpdateServiceResponse, WaitJobResponse, WaitSandboxResponse, WaitServiceResponse, WatchJobsResponse, WatchSandboxesResponse, WatchServicesResponse } from "./gen/toshi/workspace/v1/workloads_pb.js";
-import { ExecuteStartSchema, HoldServiceRequestSchema, ListServiceRunsRequestSchema, ReleaseServiceRequestSchema, SetServiceModeRequestSchema, StartServiceRequestSchema, StopServiceRequestSchema, WaitOperationRequestSchema, WakeServiceRequestSchema, WatchEventsRequestSchema, WatchOutputRequestSchema } from "./gen/toshi/workspace/v1/workspace_pb.js";
-import type { HoldServiceResponse, Job, ListServiceRunsResponse, Operation, ReleaseServiceResponse, Sandbox, Service, SetServiceModeResponse, StartServiceResponse, StopServiceResponse, WakeServiceResponse, WatchEventsResponse, WatchOutputResponse } from "./gen/toshi/workspace/v1/workspace_pb.js";
+import { ExecuteStartSchema, GetOperationRequestSchema, HoldServiceRequestSchema, ListEventsRequestSchema, ListServiceRunsRequestSchema, ReleaseServiceRequestSchema, SetServiceModeRequestSchema, StartServiceRequestSchema, StopServiceRequestSchema, WaitOperationRequestSchema, WakeServiceRequestSchema, WatchEventsRequestSchema, WatchOutputRequestSchema } from "./gen/toshi/workspace/v1/workspace_pb.js";
+import type { GetOperationResponse, HoldServiceResponse, Job, ListEventsResponse, ListServiceRunsResponse, Operation, ReleaseServiceResponse, Sandbox, Service, SetServiceModeResponse, StartServiceResponse, StopServiceResponse, WakeServiceResponse, WatchEventsResponse, WatchOutputResponse } from "./gen/toshi/workspace/v1/workspace_pb.js";
 import type { RetryPolicy } from "./retry.js";
 /** How the client is configured; the caller builds the transport. */
 export interface ToshiOptions {
@@ -39,6 +46,13 @@ export interface ToshiClient {
     readonly artifact: Client<typeof ArtifactService>;
     readonly artifactUpload: Client<typeof ArtifactUploadService>;
     readonly workload: WorkloadClient;
+    readonly workspace: Client<typeof WorkspaceService>;
+    readonly hostJob: Client<typeof HostJobService>;
+    readonly host: Client<typeof HostService>;
+    readonly token: Client<typeof TokenService>;
+    readonly auditEvent: Client<typeof AuditEventService>;
+    readonly filler: Client<typeof FillerService>;
+    readonly storageProvider: Client<typeof StorageProviderService>;
     run(req: MessageInitShape<typeof CreateJobRequestSchema>, opts?: CallOptions): Promise<JobRun>;
 }
 /** WorkloadService's calls, grouped by the type they name. */
@@ -47,7 +61,11 @@ export interface WorkloadClient {
     readonly sandboxes: SandboxesClient;
     readonly services: ServicesClient;
     waitOperation(req: MessageInitShape<typeof WaitOperationRequestSchema>, opts?: CallOptions): Promise<Operation>;
+    /** Lists the events after a cursor, a page at a time; `watchEvents` is the live form. */
+    listEvents(req: MessageInitShape<typeof ListEventsRequestSchema>, opts?: CallOptions): Promise<ListEventsResponse>;
     watchEvents(req: MessageInitShape<typeof WatchEventsRequestSchema>, opts?: CallOptions): Promise<EventWatch>;
+    /** Returns one operation: the id a long call hands back, asked for again. */
+    getOperation(req: MessageInitShape<typeof GetOperationRequestSchema>, opts?: CallOptions): Promise<GetOperationResponse>;
 }
 /** A job's calls: one method for each of WorkloadService's job calls. */
 export interface JobsClient {
@@ -146,8 +164,8 @@ export interface JobRun extends AsyncIterable<OutputChunk> {
  * retry interceptors (auth outermost, retry innermost), one transport for every
  * client and helper.
  *
- * Since 0.2.0 the public contract is WorkloadService, not WorkspaceService: its
- * calls are grouped by the type they name under `workload`, and the generated
- * client is not handed out whole.
+ * Since 0.2.0 the workload calls are grouped by the type they name under
+ * `workload`; every other service, WorkspaceService's included, is handed out
+ * as one client.
  */
 export declare function createToshiClient(options: ToshiOptions): ToshiClient;

package/dist/client.js

@@ -2,15 +2,22 @@ import { create } from "@bufbuild/protobuf";
 import { createClient } from "@connectrpc/connect";
 import { executeCommand } from "./execute.js";
 import { ArtifactService, ArtifactUploadService } from "./gen/toshi/workspace/v1/artifacts_pb.js";
+import { AuditEventService } from "./gen/toshi/workspace/v1/audit_events_pb.js";
 import { ChannelService } from "./gen/toshi/workspace/v1/channels_pb.js";
 import { DisplayService } from "./gen/toshi/workspace/v1/display_pb.js";
+import { FillerService } from "./gen/toshi/workspace/v1/fillers_pb.js";
+import { HostJobService } from "./gen/toshi/workspace/v1/hostjobs_pb.js";
+import { HostService } from "./gen/toshi/workspace/v1/hosts_pb.js";
 import { ProjectService } from "./gen/toshi/workspace/v1/projects_pb.js";
 import { RecordingService } from "./gen/toshi/workspace/v1/recordings_pb.js";
 import { SecretService } from "./gen/toshi/workspace/v1/secrets_pb.js";
+import { StorageProviderService } from "./gen/toshi/workspace/v1/storage_providers_pb.js";
+import { TokenService } from "./gen/toshi/workspace/v1/tokens_pb.js";
 import { VolumeService } from "./gen/toshi/workspace/v1/volumes_pb.js";
 import { WebhookService } from "./gen/toshi/workspace/v1/webhook_pb.js";
+import { WorkspaceService } from "./gen/toshi/workspace/v1/workspace_service_pb.js";
 import { CancelJobRequestSchema, CreateJobRequestSchema, CreateSandboxRequestSchema, CreateServiceRequestSchema, DeleteJobRequestSchema, DeleteSandboxRequestSchema, DeleteServiceRequestSchema, GetJobRequestSchema, GetSandboxRequestSchema, GetServiceRequestSchema, ListJobsRequestSchema, ListSandboxesRequestSchema, ListServicesRequestSchema, UpdateJobRequestSchema, UpdateSandboxRequestSchema, UpdateServiceRequestSchema, WaitJobRequestSchema, WaitSandboxRequestSchema, WaitServiceRequestSchema, WatchJobsRequestSchema, WatchSandboxesRequestSchema, WatchServicesRequestSchema, WorkloadService, } from "./gen/toshi/workspace/v1/workloads_pb.js";
-import { ExecuteStartSchema, HoldServiceRequestSchema, ListServiceRunsRequestSchema, ReleaseServiceRequestSchema, SetServiceModeRequestSchema, StartServiceRequestSchema, StopServiceRequestSchema, WaitOperationRequestSchema, WakeServiceRequestSchema, WatchEventsRequestSchema, WatchOutputRequestSchema, } from "./gen/toshi/workspace/v1/workspace_pb.js";
+import { ExecuteStartSchema, GetOperationRequestSchema, HoldServiceRequestSchema, ListEventsRequestSchema, ListServiceRunsRequestSchema, ReleaseServiceRequestSchema, SetServiceModeRequestSchema, StartServiceRequestSchema, StopServiceRequestSchema, WaitOperationRequestSchema, WakeServiceRequestSchema, WatchEventsRequestSchema, WatchOutputRequestSchema, } from "./gen/toshi/workspace/v1/workspace_pb.js";
 import { openOutputWatch } from "./output.js";
 import { authInterceptor, keyInterceptor, retryInterceptor, scopeInterceptor } from "./interceptors.js";
 import { normalizeRetry } from "./retry.js";
@@ -22,9 +29,9 @@ import { waitJob, waitOperation, waitSandbox, waitService } from "./wait.js";
  * retry interceptors (auth outermost, retry innermost), one transport for every
  * client and helper.
  *
- * Since 0.2.0 the public contract is WorkloadService, not WorkspaceService: its
- * calls are grouped by the type they name under `workload`, and the generated
- * client is not handed out whole.
+ * Since 0.2.0 the workload calls are grouped by the type they name under
+ * `workload`; every other service, WorkspaceService's included, is handed out
+ * as one client.
  */
 export function createToshiClient(options) {
     const retry = normalizeRetry(options.retry);
@@ -85,8 +92,17 @@ export function createToshiClient(options) {
                 listRuns: (req, opts) => workloadService.listServiceRuns(req, opts),
             },
             waitOperation: (req, opts) => waitOperation(workloadService, create(WaitOperationRequestSchema, req), opts),
+            listEvents: (req, opts) => workloadService.listEvents(req, opts),
             watchEvents: (req, opts) => openEventWatch(workloadService, retry, create(WatchEventsRequestSchema, req), opts),
+            getOperation: (req, opts) => workloadService.getOperation(req, opts),
         },
         run: (req, opts) => runJob(workloadService, retry, create(CreateJobRequestSchema, req), opts),
+        workspace: createClient(WorkspaceService, transport),
+        hostJob: createClient(HostJobService, transport),
+        host: createClient(HostService, transport),
+        token: createClient(TokenService, transport),
+        auditEvent: createClient(AuditEventService, transport),
+        filler: createClient(FillerService, transport),
+        storageProvider: createClient(StorageProviderService, transport),
     };
 }

package/dist/gen/toshi/workspace/v1/audit_events_pb.d.ts

@@ -0,0 +1,297 @@
+import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file toshi/workspace/v1/audit_events.proto.
+ */
+export declare const file_toshi_workspace_v1_audit_events: GenFile;
+/**
+ * AuditEvent is one append-only audit log entry.
+ *
+ * @generated from message toshi.workspace.v1.AuditEvent
+ */
+export type AuditEvent = Message<"toshi.workspace.v1.AuditEvent"> & {
+    /**
+     * @generated from field: int64 id = 1;
+     */
+    id: bigint;
+    /**
+     * @generated from field: google.protobuf.Timestamp at = 2;
+     */
+    at?: Timestamp | undefined;
+    /**
+     * operator, session, token, workload, product, system or webhook.
+     *
+     * @generated from field: string actor_kind = 3;
+     */
+    actorKind: string;
+    /**
+     * The session's GitHub login; the API or product token's id (never its
+     * value); the workload as "<kind>:<id>"; or a system or webhook source
+     * name.
+     *
+     * @generated from field: string actor_id = 4;
+     */
+    actorId: string;
+    /**
+     * @generated from field: string action = 5;
+     */
+    action: string;
+    /**
+     * A "<kind>:<id>" string such as job:..., host:..., token:... or
+     * filler:....
+     *
+     * @generated from field: string target = 6;
+     */
+    target: string;
+    /**
+     * A JSON object whose keys depend on the action.
+     *
+     * @generated from field: string details_json = 7;
+     */
+    detailsJson: string;
+    /**
+     * @generated from field: string request_id = 8;
+     */
+    requestId: string;
+};
+/**
+ * AuditEvent is one append-only audit log entry.
+ *
+ * @generated from message toshi.workspace.v1.AuditEvent
+ */
+export type AuditEventJson = {
+    /**
+     * @generated from field: int64 id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp at = 2;
+     */
+    at?: TimestampJson;
+    /**
+     * operator, session, token, workload, product, system or webhook.
+     *
+     * @generated from field: string actor_kind = 3;
+     */
+    actorKind?: string;
+    /**
+     * The session's GitHub login; the API or product token's id (never its
+     * value); the workload as "<kind>:<id>"; or a system or webhook source
+     * name.
+     *
+     * @generated from field: string actor_id = 4;
+     */
+    actorId?: string;
+    /**
+     * @generated from field: string action = 5;
+     */
+    action?: string;
+    /**
+     * A "<kind>:<id>" string such as job:..., host:..., token:... or
+     * filler:....
+     *
+     * @generated from field: string target = 6;
+     */
+    target?: string;
+    /**
+     * A JSON object whose keys depend on the action.
+     *
+     * @generated from field: string details_json = 7;
+     */
+    detailsJson?: string;
+    /**
+     * @generated from field: string request_id = 8;
+     */
+    requestId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.AuditEvent.
+ * Use `create(AuditEventSchema)` to create a new message.
+ */
+export declare const AuditEventSchema: GenMessage<AuditEvent, {
+    jsonType: AuditEventJson;
+}>;
+/**
+ * ListAuditEventsRequest selects the audit events to return.
+ *
+ * @generated from message toshi.workspace.v1.ListAuditEventsRequest
+ */
+export type ListAuditEventsRequest = Message<"toshi.workspace.v1.ListAuditEventsRequest"> & {
+    /**
+     * Only this action; empty matches every action.
+     *
+     * @generated from field: string action = 1;
+     */
+    action: string;
+    /**
+     * Only events at or after this time; unset is unbounded.
+     *
+     * @generated from field: google.protobuf.Timestamp since = 2;
+     */
+    since?: Timestamp | undefined;
+    /**
+     * The most events in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 3;
+     */
+    pageSize: number;
+    /**
+     * Only events whose actor_id is exactly this: the id without the kind (a
+     * token id, a GitHub login or user id, a source name). Empty matches
+     * every actor.
+     *
+     * @generated from field: string actor = 4;
+     */
+    actor: string;
+    /**
+     * Only events whose action is one of these; empty matches every action.
+     * Setting both action and actions fails with INVALID_ARGUMENT, and so do
+     * an empty entry and more than 100 entries.
+     *
+     * @generated from field: repeated string actions = 5;
+     */
+    actions: string[];
+    /**
+     * Only events whose target is exactly this, in full: "<kind>:<id>", for
+     * example "job:<id>". Empty matches every target.
+     *
+     * @generated from field: string target = 6;
+     */
+    target: string;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 7;
+     */
+    pageToken: string;
+};
+/**
+ * ListAuditEventsRequest selects the audit events to return.
+ *
+ * @generated from message toshi.workspace.v1.ListAuditEventsRequest
+ */
+export type ListAuditEventsRequestJson = {
+    /**
+     * Only this action; empty matches every action.
+     *
+     * @generated from field: string action = 1;
+     */
+    action?: string;
+    /**
+     * Only events at or after this time; unset is unbounded.
+     *
+     * @generated from field: google.protobuf.Timestamp since = 2;
+     */
+    since?: TimestampJson;
+    /**
+     * The most events in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 3;
+     */
+    pageSize?: number;
+    /**
+     * Only events whose actor_id is exactly this: the id without the kind (a
+     * token id, a GitHub login or user id, a source name). Empty matches
+     * every actor.
+     *
+     * @generated from field: string actor = 4;
+     */
+    actor?: string;
+    /**
+     * Only events whose action is one of these; empty matches every action.
+     * Setting both action and actions fails with INVALID_ARGUMENT, and so do
+     * an empty entry and more than 100 entries.
+     *
+     * @generated from field: repeated string actions = 5;
+     */
+    actions?: string[];
+    /**
+     * Only events whose target is exactly this, in full: "<kind>:<id>", for
+     * example "job:<id>". Empty matches every target.
+     *
+     * @generated from field: string target = 6;
+     */
+    target?: string;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 7;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListAuditEventsRequest.
+ * Use `create(ListAuditEventsRequestSchema)` to create a new message.
+ */
+export declare const ListAuditEventsRequestSchema: GenMessage<ListAuditEventsRequest, {
+    jsonType: ListAuditEventsRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListAuditEventsResponse
+ */
+export type ListAuditEventsResponse = Message<"toshi.workspace.v1.ListAuditEventsResponse"> & {
+    /**
+     * Newest first.
+     *
+     * @generated from field: repeated toshi.workspace.v1.AuditEvent events = 1;
+     */
+    events: AuditEvent[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListAuditEventsResponse
+ */
+export type ListAuditEventsResponseJson = {
+    /**
+     * Newest first.
+     *
+     * @generated from field: repeated toshi.workspace.v1.AuditEvent events = 1;
+     */
+    events?: AuditEventJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListAuditEventsResponse.
+ * Use `create(ListAuditEventsResponseSchema)` to create a new message.
+ */
+export declare const ListAuditEventsResponseSchema: GenMessage<ListAuditEventsResponse, {
+    jsonType: ListAuditEventsResponseJson;
+}>;
+/**
+ * AuditEventService reads the workspace's audit log: what its members, its
+ * tokens, the operator and the control plane did in it.
+ *
+ * A workspace's API token acts on its own workspace; a dashboard session
+ * names one of its workspaces in the Toshi-Workspace header. A
+ * token limited to a project or an environment is refused with
+ * PERMISSION_DENIED. A suspended workspace reads its audit log, and so does
+ * a closed one during its read-only period.
+ *
+ * @generated from service toshi.workspace.v1.AuditEventService
+ */
+export declare const AuditEventService: GenService<{
+    /**
+     * ListAuditEvents returns the workspace's audit events that match every
+     * filter field that is set, newest first.
+     *
+     * A page holds 100 events when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.AuditEventService.ListAuditEvents
+     */
+    listAuditEvents: {
+        methodKind: "unary";
+        input: typeof ListAuditEventsRequestSchema;
+        output: typeof ListAuditEventsResponseSchema;
+    };
+}>;

package/dist/gen/toshi/workspace/v1/audit_events_pb.js

@@ -0,0 +1,37 @@
+// @generated by protoc-gen-es v2.16.0 with parameter "target=ts,json_types=true,import_extension=js"
+// @generated from file toshi/workspace/v1/audit_events.proto (package toshi.workspace.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file toshi/workspace/v1/audit_events.proto.
+ */
+export const file_toshi_workspace_v1_audit_events = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
+/**
+ * Describes the message toshi.workspace.v1.AuditEvent.
+ * Use `create(AuditEventSchema)` to create a new message.
+ */
+export const AuditEventSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_audit_events, 0);
+/**
+ * Describes the message toshi.workspace.v1.ListAuditEventsRequest.
+ * Use `create(ListAuditEventsRequestSchema)` to create a new message.
+ */
+export const ListAuditEventsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_audit_events, 1);
+/**
+ * Describes the message toshi.workspace.v1.ListAuditEventsResponse.
+ * Use `create(ListAuditEventsResponseSchema)` to create a new message.
+ */
+export const ListAuditEventsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_audit_events, 2);
+/**
+ * AuditEventService reads the workspace's audit log: what its members, its
+ * tokens, the operator and the control plane did in it.
+ *
+ * A workspace's API token acts on its own workspace; a dashboard session
+ * names one of its workspaces in the Toshi-Workspace header. A
+ * token limited to a project or an environment is refused with
+ * PERMISSION_DENIED. A suspended workspace reads its audit log, and so does
+ * a closed one during its read-only period.
+ *
+ * @generated from service toshi.workspace.v1.AuditEventService
+ */
+export const AuditEventService = /*@__PURE__*/ serviceDesc(file_toshi_workspace_v1_audit_events, 0);