@toshicloud/sdk 0.3.0 → 0.3.1

package/dist/gen/toshi/workspace/v1/storage_providers_pb.js

@@ -0,0 +1,74 @@
+// @generated by protoc-gen-es v2.16.0 with parameter "target=ts,json_types=true,import_extension=js"
+// @generated from file toshi/workspace/v1/storage_providers.proto (package toshi.workspace.v1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file toshi/workspace/v1/storage_providers.proto.
+ */
+export const file_toshi_workspace_v1_storage_providers = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
+/**
+ * Describes the message toshi.workspace.v1.StorageProvider.
+ * Use `create(StorageProviderSchema)` to create a new message.
+ */
+export const StorageProviderSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 0);
+/**
+ * Describes the message toshi.workspace.v1.CreateStorageProviderRequest.
+ * Use `create(CreateStorageProviderRequestSchema)` to create a new message.
+ */
+export const CreateStorageProviderRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 1);
+/**
+ * Describes the message toshi.workspace.v1.StorageCredential.
+ * Use `create(StorageCredentialSchema)` to create a new message.
+ */
+export const StorageCredentialSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 2);
+/**
+ * Describes the message toshi.workspace.v1.CreateStorageProviderResponse.
+ * Use `create(CreateStorageProviderResponseSchema)` to create a new message.
+ */
+export const CreateStorageProviderResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 3);
+/**
+ * Describes the message toshi.workspace.v1.ListStorageProvidersRequest.
+ * Use `create(ListStorageProvidersRequestSchema)` to create a new message.
+ */
+export const ListStorageProvidersRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 4);
+/**
+ * Describes the message toshi.workspace.v1.ListStorageProvidersResponse.
+ * Use `create(ListStorageProvidersResponseSchema)` to create a new message.
+ */
+export const ListStorageProvidersResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 5);
+/**
+ * Describes the message toshi.workspace.v1.CheckStorageProviderRequest.
+ * Use `create(CheckStorageProviderRequestSchema)` to create a new message.
+ */
+export const CheckStorageProviderRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 6);
+/**
+ * Describes the message toshi.workspace.v1.CheckStorageProviderResponse.
+ * Use `create(CheckStorageProviderResponseSchema)` to create a new message.
+ */
+export const CheckStorageProviderResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 7);
+/**
+ * Describes the message toshi.workspace.v1.DeleteStorageProviderRequest.
+ * Use `create(DeleteStorageProviderRequestSchema)` to create a new message.
+ */
+export const DeleteStorageProviderRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 8);
+/**
+ * Describes the message toshi.workspace.v1.DeleteStorageProviderResponse.
+ * Use `create(DeleteStorageProviderResponseSchema)` to create a new message.
+ */
+export const DeleteStorageProviderResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_storage_providers, 9);
+/**
+ * StorageProviderService manages the buckets the workspace keeps its
+ * objects in: its own bucket, with a key the control plane wraps, and the
+ * rows the operator set for it. No call returns a credential or the
+ * operator's reference to one.
+ *
+ * Only a signed-in session may call these: a token is refused with
+ * PERMISSION_DENIED. The session names one of its workspaces in the
+ * Toshi-Workspace header. A suspended workspace lists its providers, and so does a
+ * closed one during its read-only period; every other call is refused for
+ * a suspended workspace with FAILED_PRECONDITION.
+ *
+ * @generated from service toshi.workspace.v1.StorageProviderService
+ */
+export const StorageProviderService = /*@__PURE__*/ serviceDesc(file_toshi_workspace_v1_storage_providers, 0);

package/dist/gen/toshi/workspace/v1/tokens_pb.d.ts

@@ -0,0 +1,518 @@
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+/**
+ * Describes the file toshi/workspace/v1/tokens.proto.
+ */
+export declare const file_toshi_workspace_v1_tokens: GenFile;
+/**
+ * Token is one of the workspace's tokens, without its value.
+ *
+ * @generated from message toshi.workspace.v1.Token
+ */
+export type Token = Message<"toshi.workspace.v1.Token"> & {
+    /**
+     * Token id, such as "tok-1a2b3c4d5e6f".
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * @generated from field: toshi.workspace.v1.TokenKind kind = 2;
+     */
+    kind: TokenKind;
+    /**
+     * "tenant" for an enrollment token, "session" for an API token.
+     *
+     * @generated from field: string source = 3;
+     */
+    source: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 4;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * Unset when the token does not expire.
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 5;
+     */
+    expiresAt?: Timestamp | undefined;
+    /**
+     * Unset when the token is not revoked.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 6;
+     */
+    revokedAt?: Timestamp | undefined;
+    /**
+     * Whether the token is accepted now.
+     *
+     * @generated from field: bool active = 7;
+     */
+    active: boolean;
+    /**
+     * The label the workspace chose for an API token; empty for an
+     * enrollment token.
+     *
+     * @generated from field: string name = 8;
+     */
+    name: string;
+    /**
+     * The project the token is limited to, by name. Empty for a token that
+     * acts in the whole workspace.
+     *
+     * @generated from field: string project = 9;
+     */
+    project: string;
+    /**
+     * The environment of project the token is limited to, by name. Empty
+     * when the token acts in every environment of its project.
+     *
+     * @generated from field: string environment = 10;
+     */
+    environment: string;
+};
+/**
+ * Token is one of the workspace's tokens, without its value.
+ *
+ * @generated from message toshi.workspace.v1.Token
+ */
+export type TokenJson = {
+    /**
+     * Token id, such as "tok-1a2b3c4d5e6f".
+     *
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+    /**
+     * @generated from field: toshi.workspace.v1.TokenKind kind = 2;
+     */
+    kind?: TokenKindJson;
+    /**
+     * "tenant" for an enrollment token, "session" for an API token.
+     *
+     * @generated from field: string source = 3;
+     */
+    source?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp created_at = 4;
+     */
+    createdAt?: TimestampJson;
+    /**
+     * Unset when the token does not expire.
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 5;
+     */
+    expiresAt?: TimestampJson;
+    /**
+     * Unset when the token is not revoked.
+     *
+     * @generated from field: google.protobuf.Timestamp revoked_at = 6;
+     */
+    revokedAt?: TimestampJson;
+    /**
+     * Whether the token is accepted now.
+     *
+     * @generated from field: bool active = 7;
+     */
+    active?: boolean;
+    /**
+     * The label the workspace chose for an API token; empty for an
+     * enrollment token.
+     *
+     * @generated from field: string name = 8;
+     */
+    name?: string;
+    /**
+     * The project the token is limited to, by name. Empty for a token that
+     * acts in the whole workspace.
+     *
+     * @generated from field: string project = 9;
+     */
+    project?: string;
+    /**
+     * The environment of project the token is limited to, by name. Empty
+     * when the token acts in every environment of its project.
+     *
+     * @generated from field: string environment = 10;
+     */
+    environment?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.Token.
+ * Use `create(TokenSchema)` to create a new message.
+ */
+export declare const TokenSchema: GenMessage<Token, {
+    jsonType: TokenJson;
+}>;
+/**
+ * ListTokensRequest optionally narrows the list to one kind.
+ *
+ * @generated from message toshi.workspace.v1.ListTokensRequest
+ */
+export type ListTokensRequest = Message<"toshi.workspace.v1.ListTokensRequest"> & {
+    /**
+     * TOKEN_KIND_UNSPECIFIED lists every kind.
+     *
+     * @generated from field: toshi.workspace.v1.TokenKind kind = 1;
+     */
+    kind: TokenKind;
+    /**
+     * The most tokens in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 2;
+     */
+    pageSize: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 3;
+     */
+    pageToken: string;
+};
+/**
+ * ListTokensRequest optionally narrows the list to one kind.
+ *
+ * @generated from message toshi.workspace.v1.ListTokensRequest
+ */
+export type ListTokensRequestJson = {
+    /**
+     * TOKEN_KIND_UNSPECIFIED lists every kind.
+     *
+     * @generated from field: toshi.workspace.v1.TokenKind kind = 1;
+     */
+    kind?: TokenKindJson;
+    /**
+     * The most tokens in one page; zero lets the server choose.
+     *
+     * @generated from field: int32 page_size = 2;
+     */
+    pageSize?: number;
+    /**
+     * From an earlier response's next_page_token; empty for the first page.
+     *
+     * @generated from field: string page_token = 3;
+     */
+    pageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListTokensRequest.
+ * Use `create(ListTokensRequestSchema)` to create a new message.
+ */
+export declare const ListTokensRequestSchema: GenMessage<ListTokensRequest, {
+    jsonType: ListTokensRequestJson;
+}>;
+/**
+ * ListTokensResponse carries the tokens, oldest first.
+ *
+ * @generated from message toshi.workspace.v1.ListTokensResponse
+ */
+export type ListTokensResponse = Message<"toshi.workspace.v1.ListTokensResponse"> & {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Token tokens = 1;
+     */
+    tokens: Token[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken: string;
+};
+/**
+ * ListTokensResponse carries the tokens, oldest first.
+ *
+ * @generated from message toshi.workspace.v1.ListTokensResponse
+ */
+export type ListTokensResponseJson = {
+    /**
+     * @generated from field: repeated toshi.workspace.v1.Token tokens = 1;
+     */
+    tokens?: TokenJson[];
+    /**
+     * Empty on the last page.
+     *
+     * @generated from field: string next_page_token = 2;
+     */
+    nextPageToken?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListTokensResponse.
+ * Use `create(ListTokensResponseSchema)` to create a new message.
+ */
+export declare const ListTokensResponseSchema: GenMessage<ListTokensResponse, {
+    jsonType: ListTokensResponseJson;
+}>;
+/**
+ * CreateWorkspaceTokenRequest names the token and what it may reach.
+ *
+ * @generated from message toshi.workspace.v1.CreateWorkspaceTokenRequest
+ */
+export type CreateWorkspaceTokenRequest = Message<"toshi.workspace.v1.CreateWorkspaceTokenRequest"> & {
+    /**
+     * A label for the token.
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Unset means the token never expires.
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 2;
+     */
+    expiresAt?: Timestamp | undefined;
+    /**
+     * Limits the token to this project of the workspace, by name. Empty
+     * makes a token for the whole workspace.
+     *
+     * @generated from field: string project = 3;
+     */
+    project: string;
+    /**
+     * Limits the token further to this environment of project, by name.
+     * Needs project.
+     *
+     * @generated from field: string environment = 4;
+     */
+    environment: string;
+};
+/**
+ * CreateWorkspaceTokenRequest names the token and what it may reach.
+ *
+ * @generated from message toshi.workspace.v1.CreateWorkspaceTokenRequest
+ */
+export type CreateWorkspaceTokenRequestJson = {
+    /**
+     * A label for the token.
+     *
+     * @generated from field: string name = 1;
+     */
+    name?: string;
+    /**
+     * Unset means the token never expires.
+     *
+     * @generated from field: google.protobuf.Timestamp expires_at = 2;
+     */
+    expiresAt?: TimestampJson;
+    /**
+     * Limits the token to this project of the workspace, by name. Empty
+     * makes a token for the whole workspace.
+     *
+     * @generated from field: string project = 3;
+     */
+    project?: string;
+    /**
+     * Limits the token further to this environment of project, by name.
+     * Needs project.
+     *
+     * @generated from field: string environment = 4;
+     */
+    environment?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateWorkspaceTokenRequest.
+ * Use `create(CreateWorkspaceTokenRequestSchema)` to create a new message.
+ */
+export declare const CreateWorkspaceTokenRequestSchema: GenMessage<CreateWorkspaceTokenRequest, {
+    jsonType: CreateWorkspaceTokenRequestJson;
+}>;
+/**
+ * CreateWorkspaceTokenResponse carries the new token and its value.
+ *
+ * @generated from message toshi.workspace.v1.CreateWorkspaceTokenResponse
+ */
+export type CreateWorkspaceTokenResponse = Message<"toshi.workspace.v1.CreateWorkspaceTokenResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Token token = 1;
+     */
+    token?: Token | undefined;
+    /**
+     * The new token. It is returned only here.
+     *
+     * @generated from field: string value = 2;
+     */
+    value: string;
+};
+/**
+ * CreateWorkspaceTokenResponse carries the new token and its value.
+ *
+ * @generated from message toshi.workspace.v1.CreateWorkspaceTokenResponse
+ */
+export type CreateWorkspaceTokenResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Token token = 1;
+     */
+    token?: TokenJson;
+    /**
+     * The new token. It is returned only here.
+     *
+     * @generated from field: string value = 2;
+     */
+    value?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.CreateWorkspaceTokenResponse.
+ * Use `create(CreateWorkspaceTokenResponseSchema)` to create a new message.
+ */
+export declare const CreateWorkspaceTokenResponseSchema: GenMessage<CreateWorkspaceTokenResponse, {
+    jsonType: CreateWorkspaceTokenResponseJson;
+}>;
+/**
+ * RevokeTokenRequest names the token to revoke.
+ *
+ * @generated from message toshi.workspace.v1.RevokeTokenRequest
+ */
+export type RevokeTokenRequest = Message<"toshi.workspace.v1.RevokeTokenRequest"> & {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id: string;
+};
+/**
+ * RevokeTokenRequest names the token to revoke.
+ *
+ * @generated from message toshi.workspace.v1.RevokeTokenRequest
+ */
+export type RevokeTokenRequestJson = {
+    /**
+     * @generated from field: string id = 1;
+     */
+    id?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.RevokeTokenRequest.
+ * Use `create(RevokeTokenRequestSchema)` to create a new message.
+ */
+export declare const RevokeTokenRequestSchema: GenMessage<RevokeTokenRequest, {
+    jsonType: RevokeTokenRequestJson;
+}>;
+/**
+ * RevokeTokenResponse carries the revoked token.
+ *
+ * @generated from message toshi.workspace.v1.RevokeTokenResponse
+ */
+export type RevokeTokenResponse = Message<"toshi.workspace.v1.RevokeTokenResponse"> & {
+    /**
+     * @generated from field: toshi.workspace.v1.Token token = 1;
+     */
+    token?: Token | undefined;
+    /**
+     * How many hosts were signed out and must register again.
+     *
+     * @generated from field: int32 hosts_signed_out = 2;
+     */
+    hostsSignedOut: number;
+};
+/**
+ * RevokeTokenResponse carries the revoked token.
+ *
+ * @generated from message toshi.workspace.v1.RevokeTokenResponse
+ */
+export type RevokeTokenResponseJson = {
+    /**
+     * @generated from field: toshi.workspace.v1.Token token = 1;
+     */
+    token?: TokenJson;
+    /**
+     * How many hosts were signed out and must register again.
+     *
+     * @generated from field: int32 hosts_signed_out = 2;
+     */
+    hostsSignedOut?: number;
+};
+/**
+ * Describes the message toshi.workspace.v1.RevokeTokenResponse.
+ * Use `create(RevokeTokenResponseSchema)` to create a new message.
+ */
+export declare const RevokeTokenResponseSchema: GenMessage<RevokeTokenResponse, {
+    jsonType: RevokeTokenResponseJson;
+}>;
+/**
+ * TokenKind says what a token grants.
+ *
+ * @generated from enum toshi.workspace.v1.TokenKind
+ */
+export declare enum TokenKind {
+    /**
+     * @generated from enum value: TOKEN_KIND_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * An enrollment token: registering a host the workspace owns.
+     *
+     * @generated from enum value: TOKEN_KIND_ENROLLMENT = 2;
+     */
+    ENROLLMENT = 2,
+    /**
+     * An API token: the Workspace API as the workspace.
+     *
+     * @generated from enum value: TOKEN_KIND_WORKSPACE = 3;
+     */
+    WORKSPACE = 3
+}
+/**
+ * TokenKind says what a token grants.
+ *
+ * @generated from enum toshi.workspace.v1.TokenKind
+ */
+export type TokenKindJson = "TOKEN_KIND_UNSPECIFIED" | "TOKEN_KIND_ENROLLMENT" | "TOKEN_KIND_WORKSPACE";
+/**
+ * Describes the enum toshi.workspace.v1.TokenKind.
+ */
+export declare const TokenKindSchema: GenEnum<TokenKind, TokenKindJson>;
+/**
+ * TokenService manages the workspace's tokens: its API tokens, which call
+ * the Workspace API as the workspace, and its enrollment tokens, with which
+ * its own hosts register. No call returns a token's value except the one
+ * that makes it.
+ *
+ * A workspace's API token acts on its own workspace; a dashboard session
+ * names one of its workspaces in the Toshi-Workspace header. A
+ * token limited to a project or an environment is refused with
+ * PERMISSION_DENIED: these calls act in the whole workspace. A suspended
+ * workspace lists its tokens, and every other call is refused for it with
+ * FAILED_PRECONDITION.
+ *
+ * @generated from service toshi.workspace.v1.TokenService
+ */
+export declare const TokenService: GenService<{
+    /**
+     * ListTokens returns the workspace's API and enrollment tokens, oldest
+     * first, without their values.
+     *
+     * A page holds 100 tokens when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.TokenService.ListTokens
+     */
+    listTokens: {
+        methodKind: "unary";
+        input: typeof ListTokensRequestSchema;
+        output: typeof ListTokensResponseSchema;
+    };
+    /**
+     * CreateWorkspaceToken makes an API token for the workspace and returns
+     * it with its value. Only a signed-in session may call it: a token never
+     * makes another token, and the call is refused for one with
+     * PERMISSION_DENIED. An unknown project or environment fails with
+     * NOT_FOUND; a closed workspace fails with FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.TokenService.CreateWorkspaceToken
+     */
+    createWorkspaceToken: {
+        methodKind: "unary";
+        input: typeof CreateWorkspaceTokenRequestSchema;
+        output: typeof CreateWorkspaceTokenResponseSchema;
+    };
+    /**
+     * RevokeToken stops one of the workspace's tokens working at once.
+     * Revoking an enrollment token also signs out the hosts that registered
+     * with it. A token of another workspace, and an unknown ID, fail with
+     * NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.TokenService.RevokeToken
+     */
+    revokeToken: {
+        methodKind: "unary";
+        input: typeof RevokeTokenRequestSchema;
+        output: typeof RevokeTokenResponseSchema;
+    };
+}>;

package/dist/gen/toshi/workspace/v1/tokens_pb.js

@@ -0,0 +1,88 @@
+// @generated by protoc-gen-es v2.16.0 with parameter "target=ts,json_types=true,import_extension=js"
+// @generated from file toshi/workspace/v1/tokens.proto (package toshi.workspace.v1, syntax proto3)
+/* eslint-disable */
+import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
+import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+/**
+ * Describes the file toshi/workspace/v1/tokens.proto.
+ */
+export const file_toshi_workspace_v1_tokens = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp]);
+/**
+ * Describes the message toshi.workspace.v1.Token.
+ * Use `create(TokenSchema)` to create a new message.
+ */
+export const TokenSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 0);
+/**
+ * Describes the message toshi.workspace.v1.ListTokensRequest.
+ * Use `create(ListTokensRequestSchema)` to create a new message.
+ */
+export const ListTokensRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 1);
+/**
+ * Describes the message toshi.workspace.v1.ListTokensResponse.
+ * Use `create(ListTokensResponseSchema)` to create a new message.
+ */
+export const ListTokensResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 2);
+/**
+ * Describes the message toshi.workspace.v1.CreateWorkspaceTokenRequest.
+ * Use `create(CreateWorkspaceTokenRequestSchema)` to create a new message.
+ */
+export const CreateWorkspaceTokenRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 3);
+/**
+ * Describes the message toshi.workspace.v1.CreateWorkspaceTokenResponse.
+ * Use `create(CreateWorkspaceTokenResponseSchema)` to create a new message.
+ */
+export const CreateWorkspaceTokenResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 4);
+/**
+ * Describes the message toshi.workspace.v1.RevokeTokenRequest.
+ * Use `create(RevokeTokenRequestSchema)` to create a new message.
+ */
+export const RevokeTokenRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 5);
+/**
+ * Describes the message toshi.workspace.v1.RevokeTokenResponse.
+ * Use `create(RevokeTokenResponseSchema)` to create a new message.
+ */
+export const RevokeTokenResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_tokens, 6);
+/**
+ * TokenKind says what a token grants.
+ *
+ * @generated from enum toshi.workspace.v1.TokenKind
+ */
+export var TokenKind;
+(function (TokenKind) {
+    /**
+     * @generated from enum value: TOKEN_KIND_UNSPECIFIED = 0;
+     */
+    TokenKind[TokenKind["UNSPECIFIED"] = 0] = "UNSPECIFIED";
+    /**
+     * An enrollment token: registering a host the workspace owns.
+     *
+     * @generated from enum value: TOKEN_KIND_ENROLLMENT = 2;
+     */
+    TokenKind[TokenKind["ENROLLMENT"] = 2] = "ENROLLMENT";
+    /**
+     * An API token: the Workspace API as the workspace.
+     *
+     * @generated from enum value: TOKEN_KIND_WORKSPACE = 3;
+     */
+    TokenKind[TokenKind["WORKSPACE"] = 3] = "WORKSPACE";
+})(TokenKind || (TokenKind = {}));
+/**
+ * Describes the enum toshi.workspace.v1.TokenKind.
+ */
+export const TokenKindSchema = /*@__PURE__*/ enumDesc(file_toshi_workspace_v1_tokens, 0);
+/**
+ * TokenService manages the workspace's tokens: its API tokens, which call
+ * the Workspace API as the workspace, and its enrollment tokens, with which
+ * its own hosts register. No call returns a token's value except the one
+ * that makes it.
+ *
+ * A workspace's API token acts on its own workspace; a dashboard session
+ * names one of its workspaces in the Toshi-Workspace header. A
+ * token limited to a project or an environment is refused with
+ * PERMISSION_DENIED: these calls act in the whole workspace. A suspended
+ * workspace lists its tokens, and every other call is refused for it with
+ * FAILED_PRECONDITION.
+ *
+ * @generated from service toshi.workspace.v1.TokenService
+ */
+export const TokenService = /*@__PURE__*/ serviceDesc(file_toshi_workspace_v1_tokens, 0);