@toshicloud/sdk 0.3.0 → 0.3.1

package/dist/gen/toshi/workspace/v1/hosts_pb.d.ts

@@ -0,0 +1,2135 @@
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, DurationJson, Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
+import type { Token, TokenJson } from "./tokens_pb.js";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file toshi/workspace/v1/hosts.proto.
+ */
+export declare const file_toshi_workspace_v1_hosts: GenFile;
+/**
+ * @generated from message toshi.workspace.v1.ListHostsRequest
+ */
+export type ListHostsRequest = Message<"toshi.workspace.v1.ListHostsRequest"> & {
+    /**
+     * Hosts in any of these states; empty matches every state.
+     *
+     * @generated from field: repeated toshi.workspace.v1.HostState states = 1;
+     */
+    states: HostState[];
+    /**
+     * Leave out revoked hosts.
+     *
+     * @generated from field: bool exclude_revoked = 2;
+     */
+    excludeRevoked: boolean;
+    /**
+     * The most hosts in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 3;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 4;
+     */
+    pageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListHostsRequest
+ */
+export type ListHostsRequestJson = {
+    /**
+     * Hosts in any of these states; empty matches every state.
+     *
+     * @generated from field: repeated toshi.workspace.v1.HostState states = 1;
+     */
+    states?: HostStateJson[];
+    /**
+     * Leave out revoked hosts.
+     *
+     * @generated from field: bool exclude_revoked = 2;
+     */
+    excludeRevoked?: boolean;
+    /**
+     * The most hosts in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 3;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 4;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListHostsRequest.
+ * Use `create(ListHostsRequestSchema)` to create a new message.
+ */
+export declare const ListHostsRequestSchema: GenMessage<ListHostsRequest, {
+    jsonType: ListHostsRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListHostsResponse
+ */
+export type ListHostsResponse = Message<"toshi.workspace.v1.ListHostsResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Host hosts = 1;
+     */
+    hosts: Host[];
+    /**
+     * The control plane's reaper.long_offline_after: a host whose last heartbeat
+     * is older, and that is offline, has long_offline set.
+     *
+     * @generated from field: google.protobuf.Duration long_offline_after = 2;
+     */
+    longOfflineAfter?: Duration | undefined;
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 3;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListHostsResponse
+ */
+export type ListHostsResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Host hosts = 1;
+     */
+    hosts?: HostJson[];
+    /**
+     * The control plane's reaper.long_offline_after: a host whose last heartbeat
+     * is older, and that is offline, has long_offline set.
+     *
+     * @generated from field: google.protobuf.Duration long_offline_after = 2;
+     */
+    longOfflineAfter?: DurationJson;
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 3;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListHostsResponse.
+ * Use `create(ListHostsResponseSchema)` to create a new message.
+ */
+export declare const ListHostsResponseSchema: GenMessage<ListHostsResponse, {
+    jsonType: ListHostsResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListHostStorageRequest
+ */
+export type ListHostStorageRequest = Message<"toshi.workspace.v1.ListHostStorageRequest"> & {
+    /**
+     * The host whose volumes to list.
+     *
+     * @generated from field: string host_id = 1;
+     */
+    hostId: string;
+    /**
+     * The most volumes in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 2;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 3;
+     */
+    pageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListHostStorageRequest
+ */
+export type ListHostStorageRequestJson = {
+    /**
+     * The host whose volumes to list.
+     *
+     * @generated from field: string host_id = 1;
+     */
+    hostId?: string;
+    /**
+     * The most volumes in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 2;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 3;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListHostStorageRequest.
+ * Use `create(ListHostStorageRequestSchema)` to create a new message.
+ */
+export declare const ListHostStorageRequestSchema: GenMessage<ListHostStorageRequest, {
+    jsonType: ListHostStorageRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListHostStorageResponse
+ */
+export type ListHostStorageResponse = Message<"toshi.workspace.v1.ListHostStorageResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.HostVolume volumes = 1;
+     */
+    volumes: HostVolume[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListHostStorageResponse
+ */
+export type ListHostStorageResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.HostVolume volumes = 1;
+     */
+    volumes?: HostVolumeJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListHostStorageResponse.
+ * Use `create(ListHostStorageResponseSchema)` to create a new message.
+ */
+export declare const ListHostStorageResponseSchema: GenMessage<ListHostStorageResponse, {
+    jsonType: ListHostStorageResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListHostAlertsRequest
+ */
+export type ListHostAlertsRequest = Message<"toshi.workspace.v1.ListHostAlertsRequest"> & {
+    /**
+     * The most alerts in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListHostAlertsRequest
+ */
+export type ListHostAlertsRequestJson = {
+    /**
+     * The most alerts in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 1;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 2;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListHostAlertsRequest.
+ * Use `create(ListHostAlertsRequestSchema)` to create a new message.
+ */
+export declare const ListHostAlertsRequestSchema: GenMessage<ListHostAlertsRequest, {
+    jsonType: ListHostAlertsRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ListHostAlertsResponse
+ */
+export type ListHostAlertsResponse = Message<"toshi.workspace.v1.ListHostAlertsResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.HostAlert alerts = 1;
+     */
+    alerts: HostAlert[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ListHostAlertsResponse
+ */
+export type ListHostAlertsResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.HostAlert alerts = 1;
+     */
+    alerts?: HostAlertJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListHostAlertsResponse.
+ * Use `create(ListHostAlertsResponseSchema)` to create a new message.
+ */
+export declare const ListHostAlertsResponseSchema: GenMessage<ListHostAlertsResponse, {
+    jsonType: ListHostAlertsResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.SetHostStateRequest
+ */
+export type SetHostStateRequest = Message<"toshi.workspace.v1.SetHostStateRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * HOST_STATE_DRAINING or HOST_STATE_ONLINE.
+     *
+     * @generated from field: toshi.workspace.v1.HostState state = 2;
+     */
+    state: HostState;
+};
+/**
+ * @generated from message toshi.workspace.v1.SetHostStateRequest
+ */
+export type SetHostStateRequestJson = {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * HOST_STATE_DRAINING or HOST_STATE_ONLINE.
+     *
+     * @generated from field: toshi.workspace.v1.HostState state = 2;
+     */
+    state?: HostStateJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.SetHostStateRequest.
+ * Use `create(SetHostStateRequestSchema)` to create a new message.
+ */
+export declare const SetHostStateRequestSchema: GenMessage<SetHostStateRequest, {
+    jsonType: SetHostStateRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.SetHostStateResponse
+ */
+export type SetHostStateResponse = Message<"toshi.workspace.v1.SetHostStateResponse"> & {
+    /**
+     * The host as stored after the change.
+     *
+     * @generated from field: toshi.workspace.v1.Host host = 1;
+     */
+    host?: Host | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.SetHostStateResponse
+ */
+export type SetHostStateResponseJson = {
+    /**
+     * The host as stored after the change.
+     *
+     * @generated from field: toshi.workspace.v1.Host host = 1;
+     */
+    host?: HostJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.SetHostStateResponse.
+ * Use `create(SetHostStateResponseSchema)` to create a new message.
+ */
+export declare const SetHostStateResponseSchema: GenMessage<SetHostStateResponse, {
+    jsonType: SetHostStateResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.RetireHostRequest
+ */
+export type RetireHostRequest = Message<"toshi.workspace.v1.RetireHostRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.RetireHostRequest
+ */
+export type RetireHostRequestJson = {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.RetireHostRequest.
+ * Use `create(RetireHostRequestSchema)` to create a new message.
+ */
+export declare const RetireHostRequestSchema: GenMessage<RetireHostRequest, {
+    jsonType: RetireHostRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.RetireHostResponse
+ */
+export type RetireHostResponse = Message<"toshi.workspace.v1.RetireHostResponse"> & {};
+/**
+ * @generated from message toshi.workspace.v1.RetireHostResponse
+ */
+export type RetireHostResponseJson = {};
+/**
+ * Describes the message toshi.workspace.v1.RetireHostResponse.
+ * Use `create(RetireHostResponseSchema)` to create a new message.
+ */
+export declare const RetireHostResponseSchema: GenMessage<RetireHostResponse, {
+    jsonType: RetireHostResponseJson;
+}>;
+/**
+ * CreateCloudHostRequest names the cloud host to register.
+ *
+ * @generated from message toshi.workspace.v1.CreateCloudHostRequest
+ */
+export type CreateCloudHostRequest = Message<"toshi.workspace.v1.CreateCloudHostRequest"> & {
+    /**
+     * The host name; it becomes the host id the same way enrollment does.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * The cloud provider: "aws" (the default) or "gcp".
+     *
+     * @generated from field: string cloud = 2;
+     */
+    cloud: string;
+    /**
+     * The AWS region the instances run in (AWS).
+     *
+     * @generated from field: string region = 3;
+     */
+    region: string;
+    /**
+     * The role in the workspace's account the control plane assumes (AWS).
+     *
+     * @generated from field: string role_arn = 4;
+     */
+    roleArn: string;
+    /**
+     * The image the instances boot: an AMI (AWS), or a GCE image or family
+     * (an image name, family/NAME, or a projects/... path).
+     *
+     * @generated from field: string image = 5;
+     */
+    image: string;
+    /**
+     * The subnet (AWS) or subnetwork (GCP, a name in the zone's region or
+     * regions/R/subnetworks/S) to launch into; empty means a default subnet
+     * or the default network.
+     *
+     * @generated from field: string subnet_id = 6;
+     */
+    subnetId: string;
+    /**
+     * The security groups of the instances; empty means the VPC default.
+     *
+     * @generated from field: repeated string security_group_ids = 7;
+     */
+    securityGroupIds: string[];
+    /**
+     * Maps a runner size to an instance type, overriding the defaults.
+     *
+     * @generated from field: map<string, string> instance_types = 8;
+     */
+    instanceTypes: {
+        [key: string]: string;
+    };
+    /**
+     * The most vCPUs the host runs at once; 0 means 64.
+     *
+     * @generated from field: int32 max_vcpus = 9;
+     */
+    maxVcpus: number;
+    /**
+     * Launches spot instances, moving an interrupted job onto on demand once.
+     *
+     * @generated from field: bool spot = 10;
+     */
+    spot: boolean;
+    /**
+     * The most instances the host runs at once; 0 means no limit.
+     *
+     * @generated from field: int32 max_instances = 11;
+     */
+    maxInstances: number;
+    /**
+     * The most instance-minutes the host runs per UTC day; 0 means no limit.
+     *
+     * @generated from field: int32 max_instance_minutes_per_day = 12;
+     */
+    maxInstanceMinutesPerDay: number;
+    /**
+     * The public addresses the host's instances reach the internet from, when
+     * the subnet sends their traffic through fixed ones (a NAT gateway's
+     * Elastic IP); empty means each instance's own public address.
+     *
+     * @generated from field: repeated string egress_ips = 13;
+     */
+    egressIps: string[];
+    /**
+     * Register the host as an ordinary own host instead of an overflow host:
+     * it then takes the workspace's jobs without waiting for the plan's
+     * overflow_after. False, the default, makes an overflow host.
+     *
+     * @generated from field: bool no_overflow = 14;
+     */
+    noOverflow: boolean;
+    /**
+     * The GCP project and zone the instances run in (GCP).
+     *
+     * @generated from field: string project = 15;
+     */
+    project: string;
+    /**
+     * @generated from field: string zone = 16;
+     */
+    zone: string;
+    /**
+     * The workspace's service account the control plane impersonates (GCP).
+     *
+     * @generated from field: string service_account = 17;
+     */
+    serviceAccount: string;
+    /**
+     * Where the instances reach the internet: "public" (the default: each
+     * instance gets its own public address) or "nat" (no public address; the
+     * subnet routes through the workspace's NAT gateway or Cloud NAT, whose
+     * addresses become the host's egress set).
+     *
+     * @generated from field: string egress = 18;
+     */
+    egress: string;
+};
+/**
+ * CreateCloudHostRequest names the cloud host to register.
+ *
+ * @generated from message toshi.workspace.v1.CreateCloudHostRequest
+ */
+export type CreateCloudHostRequestJson = {
+    /**
+     * The host name; it becomes the host id the same way enrollment does.
+     *
+     * @generated from field: string name = 1;
+     */
+    name?: string;
+    /**
+     * The cloud provider: "aws" (the default) or "gcp".
+     *
+     * @generated from field: string cloud = 2;
+     */
+    cloud?: string;
+    /**
+     * The AWS region the instances run in (AWS).
+     *
+     * @generated from field: string region = 3;
+     */
+    region?: string;
+    /**
+     * The role in the workspace's account the control plane assumes (AWS).
+     *
+     * @generated from field: string role_arn = 4;
+     */
+    roleArn?: string;
+    /**
+     * The image the instances boot: an AMI (AWS), or a GCE image or family
+     * (an image name, family/NAME, or a projects/... path).
+     *
+     * @generated from field: string image = 5;
+     */
+    image?: string;
+    /**
+     * The subnet (AWS) or subnetwork (GCP, a name in the zone's region or
+     * regions/R/subnetworks/S) to launch into; empty means a default subnet
+     * or the default network.
+     *
+     * @generated from field: string subnet_id = 6;
+     */
+    subnetId?: string;
+    /**
+     * The security groups of the instances; empty means the VPC default.
+     *
+     * @generated from field: repeated string security_group_ids = 7;
+     */
+    securityGroupIds?: string[];
+    /**
+     * Maps a runner size to an instance type, overriding the defaults.
+     *
+     * @generated from field: map<string, string> instance_types = 8;
+     */
+    instanceTypes?: {
+        [key: string]: string;
+    };
+    /**
+     * The most vCPUs the host runs at once; 0 means 64.
+     *
+     * @generated from field: int32 max_vcpus = 9;
+     */
+    maxVcpus?: number;
+    /**
+     * Launches spot instances, moving an interrupted job onto on demand once.
+     *
+     * @generated from field: bool spot = 10;
+     */
+    spot?: boolean;
+    /**
+     * The most instances the host runs at once; 0 means no limit.
+     *
+     * @generated from field: int32 max_instances = 11;
+     */
+    maxInstances?: number;
+    /**
+     * The most instance-minutes the host runs per UTC day; 0 means no limit.
+     *
+     * @generated from field: int32 max_instance_minutes_per_day = 12;
+     */
+    maxInstanceMinutesPerDay?: number;
+    /**
+     * The public addresses the host's instances reach the internet from, when
+     * the subnet sends their traffic through fixed ones (a NAT gateway's
+     * Elastic IP); empty means each instance's own public address.
+     *
+     * @generated from field: repeated string egress_ips = 13;
+     */
+    egressIps?: string[];
+    /**
+     * Register the host as an ordinary own host instead of an overflow host:
+     * it then takes the workspace's jobs without waiting for the plan's
+     * overflow_after. False, the default, makes an overflow host.
+     *
+     * @generated from field: bool no_overflow = 14;
+     */
+    noOverflow?: boolean;
+    /**
+     * The GCP project and zone the instances run in (GCP).
+     *
+     * @generated from field: string project = 15;
+     */
+    project?: string;
+    /**
+     * @generated from field: string zone = 16;
+     */
+    zone?: string;
+    /**
+     * The workspace's service account the control plane impersonates (GCP).
+     *
+     * @generated from field: string service_account = 17;
+     */
+    serviceAccount?: string;
+    /**
+     * Where the instances reach the internet: "public" (the default: each
+     * instance gets its own public address) or "nat" (no public address; the
+     * subnet routes through the workspace's NAT gateway or Cloud NAT, whose
+     * addresses become the host's egress set).
+     *
+     * @generated from field: string egress = 18;
+     */
+    egress?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateCloudHostRequest.
+ * Use `create(CreateCloudHostRequestSchema)` to create a new message.
+ */
+export declare const CreateCloudHostRequestSchema: GenMessage<CreateCloudHostRequest, {
+    jsonType: CreateCloudHostRequestJson;
+}>;
+/**
+ * CreateCloudHostResponse carries the host, the trust external id and the
+ * principal the role must allow.
+ *
+ * @generated from message toshi.workspace.v1.CreateCloudHostResponse
+ */
+export type CreateCloudHostResponse = Message<"toshi.workspace.v1.CreateCloudHostResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Host host = 1;
+     */
+    host?: Host | undefined;
+    /**
+     * The external ID the role's trust policy requires.
+     *
+     * @generated from field: string external_id = 2;
+     */
+    externalId: string;
+    /**
+     * The AWS principal the workspace's role must trust (AWS).
+     *
+     * @generated from field: string principal_arn = 3;
+     */
+    principalArn: string;
+    /**
+     * @generated from field: toshi.workspace.v1.CloudHost cloud_host = 4;
+     */
+    cloudHost?: CloudHost | undefined;
+    /**
+     * The Google principal the workspace's service account must let create
+     * tokens for it, with roles/iam.serviceAccountTokenCreator (GCP).
+     *
+     * @generated from field: string gcp_principal = 5;
+     */
+    gcpPrincipal: string;
+};
+/**
+ * CreateCloudHostResponse carries the host, the trust external id and the
+ * principal the role must allow.
+ *
+ * @generated from message toshi.workspace.v1.CreateCloudHostResponse
+ */
+export type CreateCloudHostResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Host host = 1;
+     */
+    host?: HostJson;
+    /**
+     * The external ID the role's trust policy requires.
+     *
+     * @generated from field: string external_id = 2;
+     */
+    externalId?: string;
+    /**
+     * The AWS principal the workspace's role must trust (AWS).
+     *
+     * @generated from field: string principal_arn = 3;
+     */
+    principalArn?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.CloudHost cloud_host = 4;
+     */
+    cloudHost?: CloudHostJson;
+    /**
+     * The Google principal the workspace's service account must let create
+     * tokens for it, with roles/iam.serviceAccountTokenCreator (GCP).
+     *
+     * @generated from field: string gcp_principal = 5;
+     */
+    gcpPrincipal?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateCloudHostResponse.
+ * Use `create(CreateCloudHostResponseSchema)` to create a new message.
+ */
+export declare const CreateCloudHostResponseSchema: GenMessage<CreateCloudHostResponse, {
+    jsonType: CreateCloudHostResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.CheckCloudHostRequest
+ */
+export type CheckCloudHostRequest = Message<"toshi.workspace.v1.CheckCloudHostRequest"> & {
+    /**
+     * @generated from field: string host_id = 1;
+     */
+    hostId: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.CheckCloudHostRequest
+ */
+export type CheckCloudHostRequestJson = {
+    /**
+     * @generated from field: string host_id = 1;
+     */
+    hostId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CheckCloudHostRequest.
+ * Use `create(CheckCloudHostRequestSchema)` to create a new message.
+ */
+export declare const CheckCloudHostRequestSchema: GenMessage<CheckCloudHostRequest, {
+    jsonType: CheckCloudHostRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.CheckCloudHostResponse
+ */
+export type CheckCloudHostResponse = Message<"toshi.workspace.v1.CheckCloudHostResponse"> & {
+    /**
+     * One row per check, in the order they ran.
+     *
+     * @generated from field: repeated toshi.workspace.v1.CloudHostCheck checks = 1;
+     */
+    checks: CloudHostCheck[];
+};
+/**
+ * @generated from message toshi.workspace.v1.CheckCloudHostResponse
+ */
+export type CheckCloudHostResponseJson = {
+    /**
+     * One row per check, in the order they ran.
+     *
+     * @generated from field: repeated toshi.workspace.v1.CloudHostCheck checks = 1;
+     */
+    checks?: CloudHostCheckJson[];
+};
+/**
+ * Describes the message toshi.workspace.v1.CheckCloudHostResponse.
+ * Use `create(CheckCloudHostResponseSchema)` to create a new message.
+ */
+export declare const CheckCloudHostResponseSchema: GenMessage<CheckCloudHostResponse, {
+    jsonType: CheckCloudHostResponseJson;
+}>;
+/**
+ * CreateEnrollmentTokenRequest says how the token's hosts register.
+ *
+ * @generated from message toshi.workspace.v1.CreateEnrollmentTokenRequest
+ */
+export type CreateEnrollmentTokenRequest = Message<"toshi.workspace.v1.CreateEnrollmentTokenRequest"> & {
+    /**
+     * Hosts that enroll with the token register as overflow hosts.
+     *
+     * @generated from field: bool overflow = 1;
+     */
+    overflow: boolean;
+};
+/**
+ * CreateEnrollmentTokenRequest says how the token's hosts register.
+ *
+ * @generated from message toshi.workspace.v1.CreateEnrollmentTokenRequest
+ */
+export type CreateEnrollmentTokenRequestJson = {
+    /**
+     * Hosts that enroll with the token register as overflow hosts.
+     *
+     * @generated from field: bool overflow = 1;
+     */
+    overflow?: boolean;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateEnrollmentTokenRequest.
+ * Use `create(CreateEnrollmentTokenRequestSchema)` to create a new message.
+ */
+export declare const CreateEnrollmentTokenRequestSchema: GenMessage<CreateEnrollmentTokenRequest, {
+    jsonType: CreateEnrollmentTokenRequestJson;
+}>;
+/**
+ * CreateEnrollmentTokenResponse carries the new token and its value.
+ *
+ * @generated from message toshi.workspace.v1.CreateEnrollmentTokenResponse
+ */
+export type CreateEnrollmentTokenResponse = Message<"toshi.workspace.v1.CreateEnrollmentTokenResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Token token = 1;
+     */
+    token?: Token | undefined;
+    /**
+     * The new token. It is returned only here.
+     *
+     * @generated from field: string value = 2;
+     */
+    value: string;
+};
+/**
+ * CreateEnrollmentTokenResponse carries the new token and its value.
+ *
+ * @generated from message toshi.workspace.v1.CreateEnrollmentTokenResponse
+ */
+export type CreateEnrollmentTokenResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Token token = 1;
+     */
+    token?: TokenJson;
+    /**
+     * The new token. It is returned only here.
+     *
+     * @generated from field: string value = 2;
+     */
+    value?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateEnrollmentTokenResponse.
+ * Use `create(CreateEnrollmentTokenResponseSchema)` to create a new message.
+ */
+export declare const CreateEnrollmentTokenResponseSchema: GenMessage<CreateEnrollmentTokenResponse, {
+    jsonType: CreateEnrollmentTokenResponseJson;
+}>;
+/**
+ * Host is a machine that runs VMs for Toshi.
+ *
+ * @generated from message toshi.workspace.v1.Host
+ */
+export type Host = Message<"toshi.workspace.v1.Host"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * The guest operating systems the host can run.
+     *
+     * @generated from field: repeated string os = 3;
+     */
+    os: string[];
+    /**
+     * @generated from field: int32 cpus = 4;
+     */
+    cpus: number;
+    /**
+     * @generated from field: int32 memory_mib = 5;
+     */
+    memoryMib: number;
+    /**
+     * @generated from field: map<string, string> labels = 6;
+     */
+    labels: {
+        [key: string]: string;
+    };
+    /**
+     * @generated from field: toshi.workspace.v1.HostState state = 7;
+     */
+    state: HostState;
+    /**
+     * When the host's agent last reported in; unset if it never did.
+     *
+     * @generated from field: google.protobuf.Timestamp last_seen_at = 8;
+     */
+    lastSeenAt?: Timestamp | undefined;
+    /**
+     * Memory not used by VMs, in MiB, from the host's last heartbeat.
+     *
+     * @generated from field: int64 free_memory_mib = 9;
+     */
+    freeMemoryMib: bigint;
+    /**
+     * Warm pools whose refill the host holds, from its last heartbeat.
+     *
+     * @generated from field: repeated toshi.workspace.v1.HeldRefill held_refills = 10;
+     */
+    heldRefills: HeldRefill[];
+    /**
+     * The host's agent is draining before a stop: it takes no new jobs. On an
+     * offline host: the host was draining when it went offline.
+     *
+     * @generated from field: bool stopping = 11;
+     */
+    stopping: boolean;
+    /**
+     * The cloud the host runs in when it is a cloud host ("aws"); empty
+     * otherwise.
+     *
+     * @generated from field: string cloud = 12;
+     */
+    cloud: string;
+    /**
+     * An overflow host takes a job only when no other host the job may use has
+     * room and the job has queued for its plan's overflow_after.
+     *
+     * @generated from field: bool overflow = 13;
+     */
+    overflow: boolean;
+    /**
+     * The host's public egress addresses.
+     *
+     * @generated from field: toshi.workspace.v1.HostEgress egress = 14;
+     */
+    egress?: HostEgress | undefined;
+    /**
+     * The version the host's agent reported when it last registered; empty when unknown.
+     *
+     * @generated from field: string agent_version = 15;
+     */
+    agentVersion: string;
+    /**
+     * Whether agent_version is inside the promise between this control plane and its agents.
+     *
+     * @generated from field: toshi.workspace.v1.AgentVersionStatus agent_version_status = 16;
+     */
+    agentVersionStatus: AgentVersionStatus;
+    /**
+     * Why agent_version is outside the promise; empty unless agent_version_status is SKEW.
+     *
+     * @generated from field: string agent_version_skew = 17;
+     */
+    agentVersionSkew: string;
+    /**
+     * True when the host is offline and its last heartbeat is older than the
+     * control plane's reaper.long_offline_after.
+     *
+     * @generated from field: bool long_offline = 18;
+     */
+    longOffline: boolean;
+    /**
+     * Why the control plane refused the host's last heartbeat: the field that
+     * was refused, with its size and the limit when it was over one, or that
+     * it holds a control character. Empty once a
+     * heartbeat of the host is taken. ListHosts sets it. The control plane
+     * keeps it in memory: after its restart the field is empty until the
+     * host's next heartbeat.
+     *
+     * @generated from field: string heartbeat_refusal = 19;
+     */
+    heartbeatRefusal: string;
+    /**
+     * When that heartbeat was refused; unset when heartbeat_refusal is empty.
+     *
+     * @generated from field: google.protobuf.Timestamp heartbeat_refused_at = 20;
+     */
+    heartbeatRefusedAt?: Timestamp | undefined;
+    /**
+     * The host's tier: "container" for a container tier host,
+     * which runs its owner's jobs in Sysbox containers that share its kernel;
+     * empty for a host that runs each job in a VM.
+     *
+     * @generated from field: string tier = 21;
+     */
+    tier: string;
+    /**
+     * When the operator revoked the host; unset for a host that is
+     * not revoked. A revoked host is offline for good and never registers
+     * again under its ID.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 22;
+     */
+    revokedAt?: Timestamp | undefined;
+    /**
+     * The memory limit, in MiB, the host's agent reported at its last answered
+     * heartbeat (toshi.agent.v1.MemoryLimit). 0 when it reports none or a
+     * limit of 0, as an agent without a limit, one whose cgroup stopped
+     * limiting, or one that predates the report does.
+     *
+     * @generated from field: int64 memory_limit_mib = 23;
+     */
+    memoryLimitMib: bigint;
+    /**
+     * Where that limit comes from: "memory_limit_mib" when the operator set it
+     * in the agent configuration, or "cgroup:<dir>" for the cgroup memory.max
+     * the agent discovered. Empty when memory_limit_mib is 0.
+     *
+     * @generated from field: string memory_limit_source = 24;
+     */
+    memoryLimitSource: string;
+    /**
+     * The minimum agent release the control plane admits when
+     * agent_version_status is BELOW_MINIMUM; empty otherwise.
+     *
+     * @generated from field: string agent_version_minimum = 25;
+     */
+    agentVersionMinimum: string;
+};
+/**
+ * Host is a machine that runs VMs for Toshi.
+ *
+ * @generated from message toshi.workspace.v1.Host
+ */
+export type HostJson = {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: string name = 2;
+     */
+    name?: string;
+    /**
+     * The guest operating systems the host can run.
+     *
+     * @generated from field: repeated string os = 3;
+     */
+    os?: string[];
+    /**
+     * @generated from field: int32 cpus = 4;
+     */
+    cpus?: number;
+    /**
+     * @generated from field: int32 memory_mib = 5;
+     */
+    memoryMib?: number;
+    /**
+     * @generated from field: map<string, string> labels = 6;
+     */
+    labels?: {
+        [key: string]: string;
+    };
+    /**
+     * @generated from field: toshi.workspace.v1.HostState state = 7;
+     */
+    state?: HostStateJson;
+    /**
+     * When the host's agent last reported in; unset if it never did.
+     *
+     * @generated from field: google.protobuf.Timestamp last_seen_at = 8;
+     */
+    lastSeenAt?: TimestampJson;
+    /**
+     * Memory not used by VMs, in MiB, from the host's last heartbeat.
+     *
+     * @generated from field: int64 free_memory_mib = 9;
+     */
+    freeMemoryMib?: string;
+    /**
+     * Warm pools whose refill the host holds, from its last heartbeat.
+     *
+     * @generated from field: repeated toshi.workspace.v1.HeldRefill held_refills = 10;
+     */
+    heldRefills?: HeldRefillJson[];
+    /**
+     * The host's agent is draining before a stop: it takes no new jobs. On an
+     * offline host: the host was draining when it went offline.
+     *
+     * @generated from field: bool stopping = 11;
+     */
+    stopping?: boolean;
+    /**
+     * The cloud the host runs in when it is a cloud host ("aws"); empty
+     * otherwise.
+     *
+     * @generated from field: string cloud = 12;
+     */
+    cloud?: string;
+    /**
+     * An overflow host takes a job only when no other host the job may use has
+     * room and the job has queued for its plan's overflow_after.
+     *
+     * @generated from field: bool overflow = 13;
+     */
+    overflow?: boolean;
+    /**
+     * The host's public egress addresses.
+     *
+     * @generated from field: toshi.workspace.v1.HostEgress egress = 14;
+     */
+    egress?: HostEgressJson;
+    /**
+     * The version the host's agent reported when it last registered; empty when unknown.
+     *
+     * @generated from field: string agent_version = 15;
+     */
+    agentVersion?: string;
+    /**
+     * Whether agent_version is inside the promise between this control plane and its agents.
+     *
+     * @generated from field: toshi.workspace.v1.AgentVersionStatus agent_version_status = 16;
+     */
+    agentVersionStatus?: AgentVersionStatusJson;
+    /**
+     * Why agent_version is outside the promise; empty unless agent_version_status is SKEW.
+     *
+     * @generated from field: string agent_version_skew = 17;
+     */
+    agentVersionSkew?: string;
+    /**
+     * True when the host is offline and its last heartbeat is older than the
+     * control plane's reaper.long_offline_after.
+     *
+     * @generated from field: bool long_offline = 18;
+     */
+    longOffline?: boolean;
+    /**
+     * Why the control plane refused the host's last heartbeat: the field that
+     * was refused, with its size and the limit when it was over one, or that
+     * it holds a control character. Empty once a
+     * heartbeat of the host is taken. ListHosts sets it. The control plane
+     * keeps it in memory: after its restart the field is empty until the
+     * host's next heartbeat.
+     *
+     * @generated from field: string heartbeat_refusal = 19;
+     */
+    heartbeatRefusal?: string;
+    /**
+     * When that heartbeat was refused; unset when heartbeat_refusal is empty.
+     *
+     * @generated from field: google.protobuf.Timestamp heartbeat_refused_at = 20;
+     */
+    heartbeatRefusedAt?: TimestampJson;
+    /**
+     * The host's tier: "container" for a container tier host,
+     * which runs its owner's jobs in Sysbox containers that share its kernel;
+     * empty for a host that runs each job in a VM.
+     *
+     * @generated from field: string tier = 21;
+     */
+    tier?: string;
+    /**
+     * When the operator revoked the host; unset for a host that is
+     * not revoked. A revoked host is offline for good and never registers
+     * again under its ID.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 22;
+     */
+    revokedAt?: TimestampJson;
+    /**
+     * The memory limit, in MiB, the host's agent reported at its last answered
+     * heartbeat (toshi.agent.v1.MemoryLimit). 0 when it reports none or a
+     * limit of 0, as an agent without a limit, one whose cgroup stopped
+     * limiting, or one that predates the report does.
+     *
+     * @generated from field: int64 memory_limit_mib = 23;
+     */
+    memoryLimitMib?: string;
+    /**
+     * Where that limit comes from: "memory_limit_mib" when the operator set it
+     * in the agent configuration, or "cgroup:<dir>" for the cgroup memory.max
+     * the agent discovered. Empty when memory_limit_mib is 0.
+     *
+     * @generated from field: string memory_limit_source = 24;
+     */
+    memoryLimitSource?: string;
+    /**
+     * The minimum agent release the control plane admits when
+     * agent_version_status is BELOW_MINIMUM; empty otherwise.
+     *
+     * @generated from field: string agent_version_minimum = 25;
+     */
+    agentVersionMinimum?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.Host.
+ * Use `create(HostSchema)` to create a new message.
+ */
+export declare const HostSchema: GenMessage<Host, {
+    jsonType: HostJson;
+}>;
+/**
+ * HeldRefill is one warm pool whose refill a host holds.
+ *
+ * @generated from message toshi.workspace.v1.HeldRefill
+ */
+export type HeldRefill = Message<"toshi.workspace.v1.HeldRefill"> & {
+    /**
+     * @generated from field: string size = 1;
+     */
+    size: string;
+    /**
+     * "memory" or "cpus".
+     *
+     * @generated from field: string reason = 2;
+     */
+    reason: string;
+};
+/**
+ * HeldRefill is one warm pool whose refill a host holds.
+ *
+ * @generated from message toshi.workspace.v1.HeldRefill
+ */
+export type HeldRefillJson = {
+    /**
+     * @generated from field: string size = 1;
+     */
+    size?: string;
+    /**
+     * "memory" or "cpus".
+     *
+     * @generated from field: string reason = 2;
+     */
+    reason?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.HeldRefill.
+ * Use `create(HeldRefillSchema)` to create a new message.
+ */
+export declare const HeldRefillSchema: GenMessage<HeldRefill, {
+    jsonType: HeldRefillJson;
+}>;
+/**
+ * HostEgress is the public addresses a host's jobs reach the internet from.
+ *
+ * @generated from message toshi.workspace.v1.HostEgress
+ */
+export type HostEgress = Message<"toshi.workspace.v1.HostEgress"> & {
+    /**
+     * IPv4 or IPv6 addresses or CIDR prefixes, sorted; empty unless source is
+     * EGRESS_SOURCE_CONFIGURED or EGRESS_SOURCE_DISCOVERED.
+     *
+     * @generated from field: repeated string ips = 1;
+     */
+    ips: string[];
+    /**
+     * @generated from field: toshi.workspace.v1.EgressSource source = 2;
+     */
+    source: EgressSource;
+    /**
+     * When the addresses last changed; unset when they never did.
+     *
+     * @generated from field: google.protobuf.Timestamp changed_at = 3;
+     */
+    changedAt?: Timestamp | undefined;
+};
+/**
+ * HostEgress is the public addresses a host's jobs reach the internet from.
+ *
+ * @generated from message toshi.workspace.v1.HostEgress
+ */
+export type HostEgressJson = {
+    /**
+     * IPv4 or IPv6 addresses or CIDR prefixes, sorted; empty unless source is
+     * EGRESS_SOURCE_CONFIGURED or EGRESS_SOURCE_DISCOVERED.
+     *
+     * @generated from field: repeated string ips = 1;
+     */
+    ips?: string[];
+    /**
+     * @generated from field: toshi.workspace.v1.EgressSource source = 2;
+     */
+    source?: EgressSourceJson;
+    /**
+     * When the addresses last changed; unset when they never did.
+     *
+     * @generated from field: google.protobuf.Timestamp changed_at = 3;
+     */
+    changedAt?: TimestampJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.HostEgress.
+ * Use `create(HostEgressSchema)` to create a new message.
+ */
+export declare const HostEgressSchema: GenMessage<HostEgress, {
+    jsonType: HostEgressJson;
+}>;
+/**
+ * HostVolume is one volume a host holds.
+ *
+ * @generated from message toshi.workspace.v1.HostVolume
+ */
+export type HostVolume = Message<"toshi.workspace.v1.HostVolume"> & {
+    /**
+     * The volume's id.
+     *
+     * @generated from field: string volume_id = 1;
+     */
+    volumeId: string;
+    /**
+     * The name of the project the volume belongs to.
+     *
+     * @generated from field: string project = 2;
+     */
+    project: string;
+    /**
+     * The id of the project the volume belongs to.
+     *
+     * @generated from field: string project_id = 3;
+     */
+    projectId: string;
+    /**
+     * The volume's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+    /**
+     * The volume's mode name: cache, seed, state or artifact.
+     *
+     * @generated from field: string mode = 5;
+     */
+    mode: string;
+    /**
+     * The most the volume holds, in bytes.
+     *
+     * @generated from field: int64 size_cap_bytes = 6;
+     */
+    sizeCapBytes: bigint;
+    /**
+     * The host keeps the volume's warm copy.
+     *
+     * @generated from field: bool warm_copy = 7;
+     */
+    warmCopy: boolean;
+    /**
+     * The open claim of a job on this host; empty when none.
+     *
+     * @generated from field: string claim_id = 8;
+     */
+    claimId: string;
+    /**
+     * The claiming job.
+     *
+     * @generated from field: string job_id = 9;
+     */
+    jobId: string;
+    /**
+     * When the claim was taken.
+     *
+     * @generated from field: google.protobuf.Timestamp claimed_at = 10;
+     */
+    claimedAt?: Timestamp | undefined;
+};
+/**
+ * HostVolume is one volume a host holds.
+ *
+ * @generated from message toshi.workspace.v1.HostVolume
+ */
+export type HostVolumeJson = {
+    /**
+     * The volume's id.
+     *
+     * @generated from field: string volume_id = 1;
+     */
+    volumeId?: string;
+    /**
+     * The name of the project the volume belongs to.
+     *
+     * @generated from field: string project = 2;
+     */
+    project?: string;
+    /**
+     * The id of the project the volume belongs to.
+     *
+     * @generated from field: string project_id = 3;
+     */
+    projectId?: string;
+    /**
+     * The volume's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+    /**
+     * The volume's mode name: cache, seed, state or artifact.
+     *
+     * @generated from field: string mode = 5;
+     */
+    mode?: string;
+    /**
+     * The most the volume holds, in bytes.
+     *
+     * @generated from field: int64 size_cap_bytes = 6;
+     */
+    sizeCapBytes?: string;
+    /**
+     * The host keeps the volume's warm copy.
+     *
+     * @generated from field: bool warm_copy = 7;
+     */
+    warmCopy?: boolean;
+    /**
+     * The open claim of a job on this host; empty when none.
+     *
+     * @generated from field: string claim_id = 8;
+     */
+    claimId?: string;
+    /**
+     * The claiming job.
+     *
+     * @generated from field: string job_id = 9;
+     */
+    jobId?: string;
+    /**
+     * When the claim was taken.
+     *
+     * @generated from field: google.protobuf.Timestamp claimed_at = 10;
+     */
+    claimedAt?: TimestampJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.HostVolume.
+ * Use `create(HostVolumeSchema)` to create a new message.
+ */
+export declare const HostVolumeSchema: GenMessage<HostVolume, {
+    jsonType: HostVolumeJson;
+}>;
+/**
+ * HostAlert is one active alert of the workspace's hosts.
+ *
+ * @generated from message toshi.workspace.v1.HostAlert
+ */
+export type HostAlert = Message<"toshi.workspace.v1.HostAlert"> & {
+    /**
+     * kind is the alert, such as "runner_exits_without_job".
+     *
+     * @generated from field: string kind = 1;
+     */
+    kind: string;
+    /**
+     * raised_at is when it was raised; since is the first event it counts.
+     *
+     * @generated from field: google.protobuf.Timestamp raised_at = 2;
+     */
+    raisedAt?: Timestamp | undefined;
+    /**
+     * @generated from field: google.protobuf.Timestamp since = 3;
+     */
+    since?: Timestamp | undefined;
+    /**
+     * count is the events counted from since, and reasons the same events by
+     * reason; top_reason has the most.
+     *
+     * @generated from field: int64 count = 4;
+     */
+    count: bigint;
+    /**
+     * @generated from field: map<string, int64> reasons = 5;
+     */
+    reasons: {
+        [key: string]: bigint;
+    };
+    /**
+     * @generated from field: string top_reason = 6;
+     */
+    topReason: string;
+    /**
+     * message says the same in one line.
+     *
+     * @generated from field: string message = 7;
+     */
+    message: string;
+};
+/**
+ * HostAlert is one active alert of the workspace's hosts.
+ *
+ * @generated from message toshi.workspace.v1.HostAlert
+ */
+export type HostAlertJson = {
+    /**
+     * kind is the alert, such as "runner_exits_without_job".
+     *
+     * @generated from field: string kind = 1;
+     */
+    kind?: string;
+    /**
+     * raised_at is when it was raised; since is the first event it counts.
+     *
+     * @generated from field: google.protobuf.Timestamp raised_at = 2;
+     */
+    raisedAt?: TimestampJson;
+    /**
+     * @generated from field: google.protobuf.Timestamp since = 3;
+     */
+    since?: TimestampJson;
+    /**
+     * count is the events counted from since, and reasons the same events by
+     * reason; top_reason has the most.
+     *
+     * @generated from field: int64 count = 4;
+     */
+    count?: string;
+    /**
+     * @generated from field: map<string, int64> reasons = 5;
+     */
+    reasons?: {
+        [key: string]: string;
+    };
+    /**
+     * @generated from field: string top_reason = 6;
+     */
+    topReason?: string;
+    /**
+     * message says the same in one line.
+     *
+     * @generated from field: string message = 7;
+     */
+    message?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.HostAlert.
+ * Use `create(HostAlertSchema)` to create a new message.
+ */
+export declare const HostAlertSchema: GenMessage<HostAlert, {
+    jsonType: HostAlertJson;
+}>;
+/**
+ * CloudHost is the AWS account behind a workspace-owned host the control plane
+ * drives.
+ *
+ * @generated from message toshi.workspace.v1.CloudHost
+ */
+export type CloudHost = Message<"toshi.workspace.v1.CloudHost"> & {
+    /**
+     * The host row this cloud host belongs to.
+     *
+     * @generated from field: string host_id = 1;
+     */
+    hostId: string;
+    /**
+     * The cloud provider: "aws" or "gcp".
+     *
+     * @generated from field: string cloud = 2;
+     */
+    cloud: string;
+    /**
+     * The region the instances run in; on GCP the zone's region.
+     *
+     * @generated from field: string region = 3;
+     */
+    region: string;
+    /**
+     * The role in the workspace's account the control plane assumes (AWS).
+     *
+     * @generated from field: string role_arn = 4;
+     */
+    roleArn: string;
+    /**
+     * The external ID the role's trust policy requires (AWS), or the project
+     * metadata must name (GCP); generated by Toshi.
+     *
+     * @generated from field: string external_id = 5;
+     */
+    externalId: string;
+    /**
+     * The image the instances boot: an AMI, or a GCE image path.
+     *
+     * @generated from field: string image = 6;
+     */
+    image: string;
+    /**
+     * The subnet (AWS) or subnetwork (GCP) to launch into; empty means a
+     * default subnet or the default network.
+     *
+     * @generated from field: string subnet_id = 7;
+     */
+    subnetId: string;
+    /**
+     * The security groups of the instances; empty means the VPC default.
+     *
+     * @generated from field: repeated string security_group_ids = 8;
+     */
+    securityGroupIds: string[];
+    /**
+     * Maps a runner size to an instance type, overriding the defaults.
+     *
+     * @generated from field: map<string, string> instance_types = 9;
+     */
+    instanceTypes: {
+        [key: string]: string;
+    };
+    /**
+     * The most vCPUs the host runs at once.
+     *
+     * @generated from field: int32 max_vcpus = 10;
+     */
+    maxVcpus: number;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 11;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * Launches spot instances, moving an interrupted job onto on demand once.
+     *
+     * @generated from field: bool spot = 12;
+     */
+    spot: boolean;
+    /**
+     * The most instances the host runs at once; 0 means no limit.
+     *
+     * @generated from field: int32 max_instances = 13;
+     */
+    maxInstances: number;
+    /**
+     * The most instance-minutes the host runs per UTC day; 0 means no limit.
+     *
+     * @generated from field: int32 max_instance_minutes_per_day = 14;
+     */
+    maxInstanceMinutesPerDay: number;
+    /**
+     * The GCP project and zone the instances run in.
+     *
+     * @generated from field: string project = 15;
+     */
+    project: string;
+    /**
+     * @generated from field: string zone = 16;
+     */
+    zone: string;
+    /**
+     * The workspace's service account the control plane impersonates (GCP).
+     *
+     * @generated from field: string service_account = 17;
+     */
+    serviceAccount: string;
+    /**
+     * Where the instances reach the internet: "public" (each gets its own
+     * public address) or "nat" (none: the workspace's NAT carries the traffic).
+     *
+     * @generated from field: string egress = 18;
+     */
+    egress: string;
+};
+/**
+ * CloudHost is the AWS account behind a workspace-owned host the control plane
+ * drives.
+ *
+ * @generated from message toshi.workspace.v1.CloudHost
+ */
+export type CloudHostJson = {
+    /**
+     * The host row this cloud host belongs to.
+     *
+     * @generated from field: string host_id = 1;
+     */
+    hostId?: string;
+    /**
+     * The cloud provider: "aws" or "gcp".
+     *
+     * @generated from field: string cloud = 2;
+     */
+    cloud?: string;
+    /**
+     * The region the instances run in; on GCP the zone's region.
+     *
+     * @generated from field: string region = 3;
+     */
+    region?: string;
+    /**
+     * The role in the workspace's account the control plane assumes (AWS).
+     *
+     * @generated from field: string role_arn = 4;
+     */
+    roleArn?: string;
+    /**
+     * The external ID the role's trust policy requires (AWS), or the project
+     * metadata must name (GCP); generated by Toshi.
+     *
+     * @generated from field: string external_id = 5;
+     */
+    externalId?: string;
+    /**
+     * The image the instances boot: an AMI, or a GCE image path.
+     *
+     * @generated from field: string image = 6;
+     */
+    image?: string;
+    /**
+     * The subnet (AWS) or subnetwork (GCP) to launch into; empty means a
+     * default subnet or the default network.
+     *
+     * @generated from field: string subnet_id = 7;
+     */
+    subnetId?: string;
+    /**
+     * The security groups of the instances; empty means the VPC default.
+     *
+     * @generated from field: repeated string security_group_ids = 8;
+     */
+    securityGroupIds?: string[];
+    /**
+     * Maps a runner size to an instance type, overriding the defaults.
+     *
+     * @generated from field: map<string, string> instance_types = 9;
+     */
+    instanceTypes?: {
+        [key: string]: string;
+    };
+    /**
+     * The most vCPUs the host runs at once.
+     *
+     * @generated from field: int32 max_vcpus = 10;
+     */
+    maxVcpus?: number;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 11;
+     */
+    createdAt?: TimestampJson;
+    /**
+     * Launches spot instances, moving an interrupted job onto on demand once.
+     *
+     * @generated from field: bool spot = 12;
+     */
+    spot?: boolean;
+    /**
+     * The most instances the host runs at once; 0 means no limit.
+     *
+     * @generated from field: int32 max_instances = 13;
+     */
+    maxInstances?: number;
+    /**
+     * The most instance-minutes the host runs per UTC day; 0 means no limit.
+     *
+     * @generated from field: int32 max_instance_minutes_per_day = 14;
+     */
+    maxInstanceMinutesPerDay?: number;
+    /**
+     * The GCP project and zone the instances run in.
+     *
+     * @generated from field: string project = 15;
+     */
+    project?: string;
+    /**
+     * @generated from field: string zone = 16;
+     */
+    zone?: string;
+    /**
+     * The workspace's service account the control plane impersonates (GCP).
+     *
+     * @generated from field: string service_account = 17;
+     */
+    serviceAccount?: string;
+    /**
+     * Where the instances reach the internet: "public" (each gets its own
+     * public address) or "nat" (none: the workspace's NAT carries the traffic).
+     *
+     * @generated from field: string egress = 18;
+     */
+    egress?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CloudHost.
+ * Use `create(CloudHostSchema)` to create a new message.
+ */
+export declare const CloudHostSchema: GenMessage<CloudHost, {
+    jsonType: CloudHostJson;
+}>;
+/**
+ * CloudHostCheck is the outcome of one cloud host check.
+ *
+ * @generated from message toshi.workspace.v1.CloudHostCheck
+ */
+export type CloudHostCheck = Message<"toshi.workspace.v1.CloudHostCheck"> & {
+    /**
+     * What was checked, for example "assume role" or "ec2:RunInstances".
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * @generated from field: toshi.workspace.v1.CloudHostCheckStatus status = 2;
+     */
+    status: CloudHostCheckStatus;
+    /**
+     * What was found, or what to fix. It never holds credentials.
+     *
+     * @generated from field: string detail = 3;
+     */
+    detail: string;
+};
+/**
+ * CloudHostCheck is the outcome of one cloud host check.
+ *
+ * @generated from message toshi.workspace.v1.CloudHostCheck
+ */
+export type CloudHostCheckJson = {
+    /**
+     * What was checked, for example "assume role" or "ec2:RunInstances".
+     *
+     * @generated from field: string name = 1;
+     */
+    name?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.CloudHostCheckStatus status = 2;
+     */
+    status?: CloudHostCheckStatusJson;
+    /**
+     * What was found, or what to fix. It never holds credentials.
+     *
+     * @generated from field: string detail = 3;
+     */
+    detail?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CloudHostCheck.
+ * Use `create(CloudHostCheckSchema)` to create a new message.
+ */
+export declare const CloudHostCheckSchema: GenMessage<CloudHostCheck, {
+    jsonType: CloudHostCheckJson;
+}>;
+/**
+ * HostState says whether a host takes new jobs.
+ *
+ * @generated from enum toshi.workspace.v1.HostState
+ */
+export declare enum HostState {
+    /**
+     * @generated from enum value: HOST_STATE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The host takes new jobs.
+     *
+     * @generated from enum value: HOST_STATE_ONLINE = 1;
+     */
+    ONLINE = 1,
+    /**
+     * The host finishes the jobs it has and takes no new ones.
+     *
+     * @generated from enum value: HOST_STATE_DRAINING = 2;
+     */
+    DRAINING = 2,
+    /**
+     * The host is not reachable.
+     *
+     * @generated from enum value: HOST_STATE_OFFLINE = 3;
+     */
+    OFFLINE = 3
+}
+/**
+ * HostState says whether a host takes new jobs.
+ *
+ * @generated from enum toshi.workspace.v1.HostState
+ */
+export type HostStateJson = "HOST_STATE_UNSPECIFIED" | "HOST_STATE_ONLINE" | "HOST_STATE_DRAINING" | "HOST_STATE_OFFLINE";
+/**
+ * Describes the enum toshi.workspace.v1.HostState.
+ */
+export declare const HostStateSchema: GenEnum<HostState, HostStateJson>;
+/**
+ * EgressSource says where a host's egress addresses come from.
+ *
+ * @generated from enum toshi.workspace.v1.EgressSource
+ */
+export declare enum EgressSource {
+    /**
+     * The host never reported them: its agent predates egress reporting.
+     *
+     * @generated from enum value: EGRESS_SOURCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Set by the operator: network.egress_ips on the agent, or egress_ips on
+     * a cloud host.
+     *
+     * @generated from enum value: EGRESS_SOURCE_CONFIGURED = 1;
+     */
+    CONFIGURED = 1,
+    /**
+     * Found by the agent through an HTTPS echo service, re-checked hourly.
+     *
+     * @generated from enum value: EGRESS_SOURCE_DISCOVERED = 2;
+     */
+    DISCOVERED = 2,
+    /**
+     * The agent has neither addresses set nor an echo service that answered.
+     *
+     * @generated from enum value: EGRESS_SOURCE_UNKNOWN = 3;
+     */
+    UNKNOWN = 3,
+    /**
+     * A cloud host without egress_ips: each job's instance has its own public
+     * address.
+     *
+     * @generated from enum value: EGRESS_SOURCE_PER_JOB = 4;
+     */
+    PER_JOB = 4
+}
+/**
+ * EgressSource says where a host's egress addresses come from.
+ *
+ * @generated from enum toshi.workspace.v1.EgressSource
+ */
+export type EgressSourceJson = "EGRESS_SOURCE_UNSPECIFIED" | "EGRESS_SOURCE_CONFIGURED" | "EGRESS_SOURCE_DISCOVERED" | "EGRESS_SOURCE_UNKNOWN" | "EGRESS_SOURCE_PER_JOB";
+/**
+ * Describes the enum toshi.workspace.v1.EgressSource.
+ */
+export declare const EgressSourceSchema: GenEnum<EgressSource, EgressSourceJson>;
+/**
+ * AgentVersionStatus says whether a host's agent matches the control plane's
+ * version promise.
+ *
+ * @generated from enum toshi.workspace.v1.AgentVersionStatus
+ */
+export declare enum AgentVersionStatus {
+    /**
+     * @generated from enum value: AGENT_VERSION_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Either side is not a release (snapshot, dev, or empty).
+     *
+     * @generated from enum value: AGENT_VERSION_STATUS_UNKNOWN = 1;
+     */
+    UNKNOWN = 1,
+    /**
+     * The agent version is inside the promise.
+     *
+     * @generated from enum value: AGENT_VERSION_STATUS_OK = 2;
+     */
+    OK = 2,
+    /**
+     * The agent version is outside the promise.
+     *
+     * @generated from enum value: AGENT_VERSION_STATUS_SKEW = 3;
+     */
+    SKEW = 3,
+    /**
+     * The agent version is below the minimum the control plane admits
+     * (agent_auth.minimum_agent_version), or is not a release while
+     * a minimum is set: the host is refused at its next Register. It outranks
+     * the other statuses. A revoked host never has it, nor does a cloud host,
+     * which has no agent: its driver runs in the control plane.
+     *
+     * @generated from enum value: AGENT_VERSION_STATUS_BELOW_MINIMUM = 4;
+     */
+    BELOW_MINIMUM = 4
+}
+/**
+ * AgentVersionStatus says whether a host's agent matches the control plane's
+ * version promise.
+ *
+ * @generated from enum toshi.workspace.v1.AgentVersionStatus
+ */
+export type AgentVersionStatusJson = "AGENT_VERSION_STATUS_UNSPECIFIED" | "AGENT_VERSION_STATUS_UNKNOWN" | "AGENT_VERSION_STATUS_OK" | "AGENT_VERSION_STATUS_SKEW" | "AGENT_VERSION_STATUS_BELOW_MINIMUM";
+/**
+ * Describes the enum toshi.workspace.v1.AgentVersionStatus.
+ */
+export declare const AgentVersionStatusSchema: GenEnum<AgentVersionStatus, AgentVersionStatusJson>;
+/**
+ * CloudHostCheckStatus is how a cloud host check came out.
+ *
+ * @generated from enum toshi.workspace.v1.CloudHostCheckStatus
+ */
+export declare enum CloudHostCheckStatus {
+    /**
+     * @generated from enum value: CLOUD_HOST_CHECK_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * @generated from enum value: CLOUD_HOST_CHECK_STATUS_OK = 1;
+     */
+    OK = 1,
+    /**
+     * Works, but something deserves a look.
+     *
+     * @generated from enum value: CLOUD_HOST_CHECK_STATUS_WARN = 2;
+     */
+    WARN = 2,
+    /**
+     * Fails: jobs on the host would fail too.
+     *
+     * @generated from enum value: CLOUD_HOST_CHECK_STATUS_FAIL = 3;
+     */
+    FAIL = 3,
+    /**
+     * Not run, because an earlier check failed or nothing could be tested.
+     *
+     * @generated from enum value: CLOUD_HOST_CHECK_STATUS_SKIPPED = 4;
+     */
+    SKIPPED = 4
+}
+/**
+ * CloudHostCheckStatus is how a cloud host check came out.
+ *
+ * @generated from enum toshi.workspace.v1.CloudHostCheckStatus
+ */
+export type CloudHostCheckStatusJson = "CLOUD_HOST_CHECK_STATUS_UNSPECIFIED" | "CLOUD_HOST_CHECK_STATUS_OK" | "CLOUD_HOST_CHECK_STATUS_WARN" | "CLOUD_HOST_CHECK_STATUS_FAIL" | "CLOUD_HOST_CHECK_STATUS_SKIPPED";
+/**
+ * Describes the enum toshi.workspace.v1.CloudHostCheckStatus.
+ */
+export declare const CloudHostCheckStatusSchema: GenEnum<CloudHostCheckStatus, CloudHostCheckStatusJson>;
+/**
+ * HostService manages the workspace's own hosts: the machines it enrolled
+ * and the cloud hosts the control plane drives in its cloud account. A host
+ * of another workspace, and a shared host, is NOT_FOUND.
+ *
+ * A workspace's API token acts on its own workspace; a dashboard session
+ * names one of its workspaces in the Toshi-Workspace header. A
+ * token limited to a project or an environment is refused with
+ * PERMISSION_DENIED: these calls act in the whole workspace. A suspended
+ * workspace reads its hosts, and every other call is refused for it with
+ * FAILED_PRECONDITION.
+ *
+ * @generated from service toshi.workspace.v1.HostService
+ */
+export declare const HostService: GenService<{
+    /**
+     * ListHosts returns the workspace's hosts that match the filter, ordered
+     * by ID.
+     *
+     * A page holds 100 hosts when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.ListHosts
+     */
+    listHosts: {
+        methodKind: "unary";
+        input: typeof ListHostsRequestSchema;
+        output: typeof ListHostsResponseSchema;
+    };
+    /**
+     * ListHostStorage returns the workspace's volumes a host holds, ordered by
+     * volume ID: those it keeps the warm copy of, and those a host job
+     * assigned to it has claimed. An unknown host fails with NOT_FOUND.
+     *
+     * A page holds 100 volumes when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.ListHostStorage
+     */
+    listHostStorage: {
+        methodKind: "unary";
+        input: typeof ListHostStorageRequestSchema;
+        output: typeof ListHostStorageResponseSchema;
+    };
+    /**
+     * ListHostAlerts returns the active alerts of the workspace's hosts:
+     * memory_held, egress_changed and agent_version_skew, one per kind,
+     * ordered by kind.
+     *
+     * A page holds 100 alerts when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.ListHostAlerts
+     */
+    listHostAlerts: {
+        methodKind: "unary";
+        input: typeof ListHostAlertsRequestSchema;
+        output: typeof ListHostAlertsResponseSchema;
+    };
+    /**
+     * SetHostState drains a host or puts it back in service. Only
+     * HOST_STATE_DRAINING and HOST_STATE_ONLINE are accepted. An unknown ID
+     * fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.SetHostState
+     */
+    setHostState: {
+        methodKind: "unary";
+        input: typeof SetHostStateRequestSchema;
+        output: typeof SetHostStateResponseSchema;
+    };
+    /**
+     * RetireHost removes a host that holds no assigned, starting or running
+     * host job; otherwise it fails with FAILED_PRECONDITION (drain it first).
+     * Its agent, if still running, registers again with its enrollment
+     * token.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.RetireHost
+     */
+    retireHost: {
+        methodKind: "unary";
+        input: typeof RetireHostRequestSchema;
+        output: typeof RetireHostResponseSchema;
+    };
+    /**
+     * CreateCloudHost registers a cloud host the control plane drives in the
+     * workspace's AWS or Google Cloud account. When cloud hosts are not
+     * configured on the control plane the call fails with
+     * FAILED_PRECONDITION, as it does for a workspace that is not active, and
+     * a workspace at its plan's own-host limit fails with RESOURCE_EXHAUSTED.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.CreateCloudHost
+     */
+    createCloudHost: {
+        methodKind: "unary";
+        input: typeof CreateCloudHostRequestSchema;
+        output: typeof CreateCloudHostResponseSchema;
+    };
+    /**
+     * CheckCloudHost checks a cloud host's setup without launching anything:
+     * the role can be assumed, the image is visible, the subnet routes to the
+     * internet, and the role's policy allows each action Toshi calls, through
+     * dry-run calls. A host that is not a cloud host fails with NOT_FOUND;
+     * cloud hosts not configured on the control plane fails with
+     * FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.CheckCloudHost
+     */
+    checkCloudHost: {
+        methodKind: "unary";
+        input: typeof CheckCloudHostRequestSchema;
+        output: typeof CheckCloudHostResponseSchema;
+    };
+    /**
+     * CreateEnrollmentToken makes an enrollment token for the workspace and
+     * returns it with its value; a host that registers with it is owned by
+     * the workspace. The token does not expire and the other tokens are
+     * untouched. A closed workspace fails with FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.HostService.CreateEnrollmentToken
+     */
+    createEnrollmentToken: {
+        methodKind: "unary";
+        input: typeof CreateEnrollmentTokenRequestSchema;
+        output: typeof CreateEnrollmentTokenResponseSchema;
+    };
+}>;