@toshicloud/sdk 0.5.0 → 0.5.1

package/dist/gen/toshi/workspace/v1/secrets_pb.d.ts

@@ -1,5 +1,5 @@
 import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
+import type { FieldMask, FieldMaskJson, Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file toshi/workspace/v1/secrets.proto.
@@ -29,6 +29,43 @@ export type SecretSet = Message<"toshi.workspace.v1.SecretSet"> & {
      * @generated from field: google.protobuf.Timestamp created_at = 4;
      */
     createdAt?: Timestamp | undefined;
+    /**
+     * Who manages this object: "manifest" when the project manifest declares
+     * it, empty when nothing does. A manifest apply sets managed_by,
+     * manifest_digest, manifest_origin and managed_fields together.
+     *
+     * @generated from field: string managed_by = 5;
+     */
+    managedBy: string;
+    /**
+     * The SHA-256 of the manifest file that last set this object, as 64
+     * lowercase hex characters. Empty when managed_by is empty.
+     *
+     * @generated from field: string manifest_digest = 6;
+     */
+    manifestDigest: string;
+    /**
+     * The fields of this object the manifest declares, as update mask paths.
+     * Empty when managed_by is empty.
+     *
+     * @generated from field: repeated string managed_fields = 7;
+     */
+    managedFields: string[];
+    /**
+     * How the manifest came to manage this object: "created" when a manifest
+     * apply created it, "adopted" when an apply took over an object that
+     * already existed. Empty when managed_by is empty.
+     *
+     * @generated from field: string manifest_origin = 8;
+     */
+    manifestOrigin: string;
+    /**
+     * The names of the set's keys, sorted; never a value. A person's own
+     * keys are not listed.
+     *
+     * @generated from field: repeated string keys = 9;
+     */
+    keys: string[];
 };
 /**
  * SecretSet is a project's set: an environment's, or the shared one.
@@ -54,6 +91,43 @@ export type SecretSetJson = {
      * @generated from field: google.protobuf.Timestamp created_at = 4;
      */
     createdAt?: TimestampJson;
+    /**
+     * Who manages this object: "manifest" when the project manifest declares
+     * it, empty when nothing does. A manifest apply sets managed_by,
+     * manifest_digest, manifest_origin and managed_fields together.
+     *
+     * @generated from field: string managed_by = 5;
+     */
+    managedBy?: string;
+    /**
+     * The SHA-256 of the manifest file that last set this object, as 64
+     * lowercase hex characters. Empty when managed_by is empty.
+     *
+     * @generated from field: string manifest_digest = 6;
+     */
+    manifestDigest?: string;
+    /**
+     * The fields of this object the manifest declares, as update mask paths.
+     * Empty when managed_by is empty.
+     *
+     * @generated from field: repeated string managed_fields = 7;
+     */
+    managedFields?: string[];
+    /**
+     * How the manifest came to manage this object: "created" when a manifest
+     * apply created it, "adopted" when an apply took over an object that
+     * already existed. Empty when managed_by is empty.
+     *
+     * @generated from field: string manifest_origin = 8;
+     */
+    manifestOrigin?: string;
+    /**
+     * The names of the set's keys, sorted; never a value. A person's own
+     * keys are not listed.
+     *
+     * @generated from field: repeated string keys = 9;
+     */
+    keys?: string[];
 };
 /**
  * Describes the message toshi.workspace.v1.SecretSet.
@@ -88,6 +162,26 @@ export type Secret = Message<"toshi.workspace.v1.Secret"> & {
      * @generated from field: google.protobuf.Timestamp updated_at = 4;
      */
     updatedAt?: Timestamp | undefined;
+    /**
+     * The user id of the person whose own key it is; empty for a key of the
+     * set.
+     *
+     * @generated from field: string owner = 5;
+     */
+    owner: string;
+    /**
+     * The key is the caller's own.
+     *
+     * @generated from field: bool mine = 6;
+     */
+    mine: boolean;
+    /**
+     * The key's owner holds no role in the workspace any more: no workload
+     * receives it, and it stays until it is deleted.
+     *
+     * @generated from field: bool owner_left = 7;
+     */
+    ownerLeft: boolean;
 };
 /**
  * Secret is a key as anyone may see it: never its value.
@@ -115,6 +209,26 @@ export type SecretJson = {
      * @generated from field: google.protobuf.Timestamp updated_at = 4;
      */
     updatedAt?: TimestampJson;
+    /**
+     * The user id of the person whose own key it is; empty for a key of the
+     * set.
+     *
+     * @generated from field: string owner = 5;
+     */
+    owner?: string;
+    /**
+     * The key is the caller's own.
+     *
+     * @generated from field: bool mine = 6;
+     */
+    mine?: boolean;
+    /**
+     * The key's owner holds no role in the workspace any more: no workload
+     * receives it, and it stays until it is deleted.
+     *
+     * @generated from field: bool owner_left = 7;
+     */
+    ownerLeft?: boolean;
 };
 /**
  * Describes the message toshi.workspace.v1.Secret.
@@ -225,6 +339,10 @@ export type CreateSecretSetRequest = Message<"toshi.workspace.v1.CreateSecretSet
      * @generated from field: bool shared = 3;
      */
     shared: boolean;
+    /**
+     * @generated from field: string request_key = 4;
+     */
+    requestKey: string;
 };
 /**
  * @generated from message toshi.workspace.v1.CreateSecretSetRequest
@@ -242,6 +360,10 @@ export type CreateSecretSetRequestJson = {
      * @generated from field: bool shared = 3;
      */
     shared?: boolean;
+    /**
+     * @generated from field: string request_key = 4;
+     */
+    requestKey?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.CreateSecretSetRequest.
@@ -417,6 +539,88 @@ export type DeleteSecretSetResponseJson = {};
 export declare const DeleteSecretSetResponseSchema: GenMessage<DeleteSecretSetResponse, {
     jsonType: DeleteSecretSetResponseJson;
 }>;
+/**
+ * @generated from message toshi.workspace.v1.UpdateSecretSetRequest
+ */
+export type UpdateSecretSetRequest = Message<"toshi.workspace.v1.UpdateSecretSetRequest"> & {
+    /**
+     * project, environment and shared name the set, as in
+     * DeleteSecretSetRequest; the fields update_mask names carry the new
+     * values.
+     *
+     * @generated from field: toshi.workspace.v1.SecretSet set = 1;
+     */
+    set?: SecretSet | undefined;
+    /**
+     * keys, or the four paths of the management mark: managed_by,
+     * manifest_digest, manifest_origin and managed_fields set it and go
+     * together: all four or none, and on their own; managed_by "manifest"
+     * needs the digest, an origin and at least one field path, and an empty
+     * managed_by clears all four. An unset mask never sets the mark.
+     *
+     * @generated from field: google.protobuf.FieldMask update_mask = 2;
+     */
+    updateMask?: FieldMask | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.UpdateSecretSetRequest
+ */
+export type UpdateSecretSetRequestJson = {
+    /**
+     * project, environment and shared name the set, as in
+     * DeleteSecretSetRequest; the fields update_mask names carry the new
+     * values.
+     *
+     * @generated from field: toshi.workspace.v1.SecretSet set = 1;
+     */
+    set?: SecretSetJson;
+    /**
+     * keys, or the four paths of the management mark: managed_by,
+     * manifest_digest, manifest_origin and managed_fields set it and go
+     * together: all four or none, and on their own; managed_by "manifest"
+     * needs the digest, an origin and at least one field path, and an empty
+     * managed_by clears all four. An unset mask never sets the mark.
+     *
+     * @generated from field: google.protobuf.FieldMask update_mask = 2;
+     */
+    updateMask?: FieldMaskJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.UpdateSecretSetRequest.
+ * Use `create(UpdateSecretSetRequestSchema)` to create a new message.
+ */
+export declare const UpdateSecretSetRequestSchema: GenMessage<UpdateSecretSetRequest, {
+    jsonType: UpdateSecretSetRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.UpdateSecretSetResponse
+ */
+export type UpdateSecretSetResponse = Message<"toshi.workspace.v1.UpdateSecretSetResponse"> & {
+    /**
+     * The set as stored.
+     *
+     * @generated from field: toshi.workspace.v1.SecretSet set = 1;
+     */
+    set?: SecretSet | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.UpdateSecretSetResponse
+ */
+export type UpdateSecretSetResponseJson = {
+    /**
+     * The set as stored.
+     *
+     * @generated from field: toshi.workspace.v1.SecretSet set = 1;
+     */
+    set?: SecretSetJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.UpdateSecretSetResponse.
+ * Use `create(UpdateSecretSetResponseSchema)` to create a new message.
+ */
+export declare const UpdateSecretSetResponseSchema: GenMessage<UpdateSecretSetResponse, {
+    jsonType: UpdateSecretSetResponseJson;
+}>;
 /**
  * @generated from message toshi.workspace.v1.PutSecretRequest
  */
@@ -444,6 +648,12 @@ export type PutSecretRequest = Message<"toshi.workspace.v1.PutSecretRequest"> &
      * @generated from field: bytes value = 5;
      */
     value: Uint8Array;
+    /**
+     * The key is the caller's own.
+     *
+     * @generated from field: bool own = 6;
+     */
+    own: boolean;
 };
 /**
  * @generated from message toshi.workspace.v1.PutSecretRequest
@@ -472,6 +682,12 @@ export type PutSecretRequestJson = {
      * @generated from field: bytes value = 5;
      */
     value?: string;
+    /**
+     * The key is the caller's own.
+     *
+     * @generated from field: bool own = 6;
+     */
+    own?: boolean;
 };
 /**
  * Describes the message toshi.workspace.v1.PutSecretRequest.
@@ -525,6 +741,18 @@ export type DeleteSecretRequest = Message<"toshi.workspace.v1.DeleteSecretReques
      * @generated from field: string name = 4;
      */
     name: string;
+    /**
+     * The caller's own key; not with owner.
+     *
+     * @generated from field: bool own = 5;
+     */
+    own: boolean;
+    /**
+     * The own key of the person with this user id; not with own.
+     *
+     * @generated from field: string owner = 6;
+     */
+    owner: string;
 };
 /**
  * @generated from message toshi.workspace.v1.DeleteSecretRequest
@@ -546,6 +774,18 @@ export type DeleteSecretRequestJson = {
      * @generated from field: string name = 4;
      */
     name?: string;
+    /**
+     * The caller's own key; not with owner.
+     *
+     * @generated from field: bool own = 5;
+     */
+    own?: boolean;
+    /**
+     * The own key of the person with this user id; not with own.
+     *
+     * @generated from field: string owner = 6;
+     */
+    owner?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.DeleteSecretRequest.
@@ -703,6 +943,18 @@ export type ListSecretVersionsRequest = Message<"toshi.workspace.v1.ListSecretVe
      * @generated from field: string page_token = 6;
      */
     pageToken: string;
+    /**
+     * The caller's own key; not with owner.
+     *
+     * @generated from field: bool own = 7;
+     */
+    own: boolean;
+    /**
+     * The own key of the person with this user id; not with own.
+     *
+     * @generated from field: string owner = 8;
+     */
+    owner: string;
 };
 /**
  * @generated from message toshi.workspace.v1.ListSecretVersionsRequest
@@ -736,6 +988,18 @@ export type ListSecretVersionsRequestJson = {
      * @generated from field: string page_token = 6;
      */
     pageToken?: string;
+    /**
+     * The caller's own key; not with owner.
+     *
+     * @generated from field: bool own = 7;
+     */
+    own?: boolean;
+    /**
+     * The own key of the person with this user id; not with own.
+     *
+     * @generated from field: string owner = 8;
+     */
+    owner?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.ListSecretVersionsRequest.
@@ -1064,14 +1328,21 @@ export declare enum SecretGranteeKind {
      *
      * @generated from enum value: SECRET_GRANTEE_KIND_SERVICE = 3;
      */
-    SERVICE = 3
+    SERVICE = 3,
+    /**
+     * The builds of an image: grantee is the image's name. Its values reach
+     * the build's setup command only, never a VM started from the image.
+     *
+     * @generated from enum value: SECRET_GRANTEE_KIND_IMAGE_BUILD = 4;
+     */
+    IMAGE_BUILD = 4
 }
 /**
  * SecretGranteeKind is what a set is granted to.
  *
  * @generated from enum toshi.workspace.v1.SecretGranteeKind
  */
-export type SecretGranteeKindJson = "SECRET_GRANTEE_KIND_UNSPECIFIED" | "SECRET_GRANTEE_KIND_KIND" | "SECRET_GRANTEE_KIND_IMAGE" | "SECRET_GRANTEE_KIND_SERVICE";
+export type SecretGranteeKindJson = "SECRET_GRANTEE_KIND_UNSPECIFIED" | "SECRET_GRANTEE_KIND_KIND" | "SECRET_GRANTEE_KIND_IMAGE" | "SECRET_GRANTEE_KIND_SERVICE" | "SECRET_GRANTEE_KIND_IMAGE_BUILD";
 /**
  * Describes the enum toshi.workspace.v1.SecretGranteeKind.
  */
@@ -1089,8 +1360,15 @@ export declare const SecretGranteeKindSchema: GenEnum<SecretGranteeKind, SecretG
  * workspace does not have is NOT_FOUND.
  *
  * No call returns a value: a key is answered with its name, version, size
- * and time. The calls take no request_key: a retried PutSecret makes one
- * more version.
+ * and time. CreateSecretSet takes a request_key; the other calls take none:
+ * a retried PutSecret makes one more version.
+ *
+ * A key can be one person's own: only the workloads that person starts
+ * receive it, beside the keys of the environment's set, while the person
+ * holds a role in the workspace. A sandbox's commands receive it only when
+ * that person runs them, and CI jobs never. A workspace token starts
+ * workloads as the person who created it. The calls on keys take own, for
+ * the caller's own key, or owner, a person's user id, for that person's.
  *
  * @generated from service toshi.workspace.v1.SecretService
  */
@@ -1128,6 +1406,25 @@ export declare const SecretService: GenService<{
         input: typeof DeleteSecretSetRequestSchema;
         output: typeof DeleteSecretSetResponseSchema;
     };
+    /**
+     * UpdateSecretSet sets the fields update_mask names on a set. keys
+     * names the keys the set keeps: a key of the set the list leaves out is
+     * deleted with all its versions, in one write. The request never carries
+     * a value, so a name the set does not hold is FAILED_PRECONDITION naming
+     * it: its value is set with PutSecret first. A person's own keys are not
+     * in a set's list and are never deleted by it. An omitted mask means the
+     * fields the request sets; an empty list deletes every key of the set
+     * only when the mask names keys. "*" and a path of any other field are
+     * INVALID_ARGUMENT, and so are an empty and a repeated name. A set the
+     * project does not have is NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.SecretService.UpdateSecretSet
+     */
+    updateSecretSet: {
+        methodKind: "unary";
+        input: typeof UpdateSecretSetRequestSchema;
+        output: typeof UpdateSecretSetResponseSchema;
+    };
     /**
      * PutSecret makes the key's next version, holding value, and returns the
      * key without it. A name is either shared or set per environment: a
@@ -1135,6 +1432,12 @@ export declare const SecretService: GenService<{
      * in the shared set, fails with FAILED_PRECONDITION. Two environments'
      * sets may hold the same name.
      *
+     * With own the key is the caller's own, set apart from the environment's
+     * set, which need not exist; a call that acts for no person fails with
+     * FAILED_PRECONDITION. A person's own names follow the same rule among
+     * themselves, and a name may not be both someone's own and not: either
+     * fails with FAILED_PRECONDITION. Two people may own the same name.
+     *
      * @generated from rpc toshi.workspace.v1.SecretService.PutSecret
      */
     putSecret: {
@@ -1143,7 +1446,8 @@ export declare const SecretService: GenService<{
         output: typeof PutSecretResponseSchema;
     };
     /**
-     * DeleteSecret removes the key and every version of it.
+     * DeleteSecret removes the key and every version of it: with own the
+     * caller's own key, with owner that person's.
      *
      * @generated from rpc toshi.workspace.v1.SecretService.DeleteSecret
      */
@@ -1154,7 +1458,8 @@ export declare const SecretService: GenService<{
     };
     /**
      * ListSecrets returns the set's keys by name, each with its newest
-     * version.
+     * version, and every person's own keys of the same place beside them,
+     * each with its owner.
      *
      * A page holds 100 keys when page_size is zero, and 1000 at most.
      *
@@ -1166,7 +1471,8 @@ export declare const SecretService: GenService<{
         output: typeof ListSecretsResponseSchema;
     };
     /**
-     * ListSecretVersions returns the key's versions, oldest first.
+     * ListSecretVersions returns the key's versions, oldest first: with own
+     * the caller's own key's, with owner that person's.
      *
      * A page holds 100 versions when page_size is zero, and 1000 at most.
      *

package/dist/gen/toshi/workspace/v1/secrets_pb.js

@@ -2,12 +2,12 @@
 // @generated from file toshi/workspace/v1/secrets.proto (package toshi.workspace.v1, syntax proto3)
 /* eslint-disable */
 import { enumDesc, fileDesc, messageDesc, serviceDesc } from "@bufbuild/protobuf/codegenv2";
-import { file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
+import { file_google_protobuf_field_mask, file_google_protobuf_timestamp } from "@bufbuild/protobuf/wkt";
 import { file_toshi_permission } from "../../permission_pb.js";
 /**
  * Describes the file toshi/workspace/v1/secrets.proto.
  */
-export const file_toshi_workspace_v1_secrets = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_timestamp, file_toshi_permission]);
+export const file_toshi_workspace_v1_secrets = /*@__PURE__*/ fileDesc("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", [file_google_protobuf_field_mask, file_google_protobuf_timestamp, file_toshi_permission]);
 /**
  * Describes the message toshi.workspace.v1.SecretSet.
  * Use `create(SecretSetSchema)` to create a new message.
@@ -58,76 +58,86 @@ export const DeleteSecretSetRequestSchema = /*@__PURE__*/ messageDesc(file_toshi
  * Use `create(DeleteSecretSetResponseSchema)` to create a new message.
  */
 export const DeleteSecretSetResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 9);
+/**
+ * Describes the message toshi.workspace.v1.UpdateSecretSetRequest.
+ * Use `create(UpdateSecretSetRequestSchema)` to create a new message.
+ */
+export const UpdateSecretSetRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 10);
+/**
+ * Describes the message toshi.workspace.v1.UpdateSecretSetResponse.
+ * Use `create(UpdateSecretSetResponseSchema)` to create a new message.
+ */
+export const UpdateSecretSetResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 11);
 /**
  * Describes the message toshi.workspace.v1.PutSecretRequest.
  * Use `create(PutSecretRequestSchema)` to create a new message.
  */
-export const PutSecretRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 10);
+export const PutSecretRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 12);
 /**
  * Describes the message toshi.workspace.v1.PutSecretResponse.
  * Use `create(PutSecretResponseSchema)` to create a new message.
  */
-export const PutSecretResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 11);
+export const PutSecretResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 13);
 /**
  * Describes the message toshi.workspace.v1.DeleteSecretRequest.
  * Use `create(DeleteSecretRequestSchema)` to create a new message.
  */
-export const DeleteSecretRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 12);
+export const DeleteSecretRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 14);
 /**
  * Describes the message toshi.workspace.v1.DeleteSecretResponse.
  * Use `create(DeleteSecretResponseSchema)` to create a new message.
  */
-export const DeleteSecretResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 13);
+export const DeleteSecretResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 15);
 /**
  * Describes the message toshi.workspace.v1.ListSecretsRequest.
  * Use `create(ListSecretsRequestSchema)` to create a new message.
  */
-export const ListSecretsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 14);
+export const ListSecretsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 16);
 /**
  * Describes the message toshi.workspace.v1.ListSecretsResponse.
  * Use `create(ListSecretsResponseSchema)` to create a new message.
  */
-export const ListSecretsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 15);
+export const ListSecretsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 17);
 /**
  * Describes the message toshi.workspace.v1.ListSecretVersionsRequest.
  * Use `create(ListSecretVersionsRequestSchema)` to create a new message.
  */
-export const ListSecretVersionsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 16);
+export const ListSecretVersionsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 18);
 /**
  * Describes the message toshi.workspace.v1.ListSecretVersionsResponse.
  * Use `create(ListSecretVersionsResponseSchema)` to create a new message.
  */
-export const ListSecretVersionsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 17);
+export const ListSecretVersionsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 19);
 /**
  * Describes the message toshi.workspace.v1.GrantSecretSetRequest.
  * Use `create(GrantSecretSetRequestSchema)` to create a new message.
  */
-export const GrantSecretSetRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 18);
+export const GrantSecretSetRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 20);
 /**
  * Describes the message toshi.workspace.v1.GrantSecretSetResponse.
  * Use `create(GrantSecretSetResponseSchema)` to create a new message.
  */
-export const GrantSecretSetResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 19);
+export const GrantSecretSetResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 21);
 /**
  * Describes the message toshi.workspace.v1.RevokeSecretSetRequest.
  * Use `create(RevokeSecretSetRequestSchema)` to create a new message.
  */
-export const RevokeSecretSetRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 20);
+export const RevokeSecretSetRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 22);
 /**
  * Describes the message toshi.workspace.v1.RevokeSecretSetResponse.
  * Use `create(RevokeSecretSetResponseSchema)` to create a new message.
  */
-export const RevokeSecretSetResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 21);
+export const RevokeSecretSetResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 23);
 /**
  * Describes the message toshi.workspace.v1.ListSecretSetGrantsRequest.
  * Use `create(ListSecretSetGrantsRequestSchema)` to create a new message.
  */
-export const ListSecretSetGrantsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 22);
+export const ListSecretSetGrantsRequestSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 24);
 /**
  * Describes the message toshi.workspace.v1.ListSecretSetGrantsResponse.
  * Use `create(ListSecretSetGrantsResponseSchema)` to create a new message.
  */
-export const ListSecretSetGrantsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 23);
+export const ListSecretSetGrantsResponseSchema = /*@__PURE__*/ messageDesc(file_toshi_workspace_v1_secrets, 25);
 /**
  * SecretGranteeKind is what a set is granted to.
  *
@@ -157,6 +167,13 @@ export var SecretGranteeKind;
      * @generated from enum value: SECRET_GRANTEE_KIND_SERVICE = 3;
      */
     SecretGranteeKind[SecretGranteeKind["SERVICE"] = 3] = "SERVICE";
+    /**
+     * The builds of an image: grantee is the image's name. Its values reach
+     * the build's setup command only, never a VM started from the image.
+     *
+     * @generated from enum value: SECRET_GRANTEE_KIND_IMAGE_BUILD = 4;
+     */
+    SecretGranteeKind[SecretGranteeKind["IMAGE_BUILD"] = 4] = "IMAGE_BUILD";
 })(SecretGranteeKind || (SecretGranteeKind = {}));
 /**
  * Describes the enum toshi.workspace.v1.SecretGranteeKind.
@@ -175,8 +192,15 @@ export const SecretGranteeKindSchema = /*@__PURE__*/ enumDesc(file_toshi_workspa
  * workspace does not have is NOT_FOUND.
  *
  * No call returns a value: a key is answered with its name, version, size
- * and time. The calls take no request_key: a retried PutSecret makes one
- * more version.
+ * and time. CreateSecretSet takes a request_key; the other calls take none:
+ * a retried PutSecret makes one more version.
+ *
+ * A key can be one person's own: only the workloads that person starts
+ * receive it, beside the keys of the environment's set, while the person
+ * holds a role in the workspace. A sandbox's commands receive it only when
+ * that person runs them, and CI jobs never. A workspace token starts
+ * workloads as the person who created it. The calls on keys take own, for
+ * the caller's own key, or owner, a person's user id, for that person's.
  *
  * @generated from service toshi.workspace.v1.SecretService
  */

package/dist/gen/toshi/workspace/v1/storage_providers_pb.d.ts

@@ -230,6 +230,13 @@ export type CreateStorageProviderRequest = Message<"toshi.workspace.v1.CreateSto
      * @generated from field: string mode = 10;
      */
     mode: string;
+    /**
+     * A key that makes the call safe to retry: a retry with the same key and
+     * the same request answers with the provider the first call stored.
+     *
+     * @generated from field: string request_key = 11;
+     */
+    requestKey: string;
 };
 /**
  * CreateStorageProviderRequest describes the workspace's own bucket.
@@ -285,6 +292,13 @@ export type CreateStorageProviderRequestJson = {
      * @generated from field: string mode = 10;
      */
     mode?: string;
+    /**
+     * A key that makes the call safe to retry: a retry with the same key and
+     * the same request answers with the provider the first call stored.
+     *
+     * @generated from field: string request_key = 11;
+     */
+    requestKey?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.CreateStorageProviderRequest.