@toshicloud/sdk 0.5.0 → 0.5.1

package/dist/gen/toshi/workspace/v1/workloads_pb.d.ts

@@ -1,11 +1,297 @@
-import type { GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { Duration, DurationJson, FieldMask, FieldMaskJson } from "@bufbuild/protobuf/wkt";
-import type { BoundBinding, BoundBindingJson, CancelExecutionRequestSchema, CancelExecutionResponseSchema, CreatePreviewShareLinkRequestSchema, CreatePreviewShareLinkResponseSchema, EventType, EventTypeJson, ExecuteRequestSchema, ExecuteResponseSchema, GetOperationRequestSchema, GetOperationResponseSchema, HoldServiceRequestSchema, HoldServiceResponseSchema, Job, JobJson, JobSpec, JobSpecJson, JobState, JobStateJson, Keepalive, KeepaliveJson, ListEventsRequestSchema, ListEventsResponseSchema, ListPreviewShareLinksRequestSchema, ListPreviewShareLinksResponseSchema, ListServiceRunsRequestSchema, ListServiceRunsResponseSchema, Operation, OperationJson, Output, OutputJson, RecordingPolicy, RecordingPolicyJson, ReleaseServiceRequestSchema, ReleaseServiceResponseSchema, RevokePreviewShareLinkRequestSchema, RevokePreviewShareLinkResponseSchema, Sandbox, SandboxJson, SandboxSpec, SandboxSpecJson, SandboxState, SandboxStateJson, Service, ServiceJson, ServiceSpec, ServiceSpecJson, ServiceState, ServiceStateJson, SetServiceModeRequestSchema, SetServiceModeResponseSchema, StartServiceRequestSchema, StartServiceResponseSchema, StopServiceRequestSchema, StopServiceResponseSchema, WaitOperationRequestSchema, WaitOperationResponseSchema, WakeServiceRequestSchema, WakeServiceResponseSchema, WatchEventsRequestSchema, WatchEventsResponseSchema, WatchGuestLogRequestSchema, WatchGuestLogResponseSchema, WatchOutputRequestSchema, WatchOutputResponseSchema, WatchTelemetryRequestSchema, WatchTelemetryResponseSchema } from "./workspace_pb.js";
+import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import type { Duration, DurationJson, FieldMask, FieldMaskJson, Timestamp, TimestampJson } from "@bufbuild/protobuf/wkt";
+import type { AnswerServiceSignInRequestSchema, AnswerServiceSignInResponseSchema, BoundBinding, BoundBindingJson, CancelExecutionRequestSchema, CancelExecutionResponseSchema, CancelServiceSignInRequestSchema, CancelServiceSignInResponseSchema, CreatePreviewShareLinkRequestSchema, CreatePreviewShareLinkResponseSchema, CreateServiceShareLinkRequestSchema, CreateServiceShareLinkResponseSchema, Event, EventJson, EventType, EventTypeJson, ExecuteCommandRequestSchema, ExecuteCommandResponseSchema, ExecuteRequestSchema, ExecuteResponseSchema, GetOperationRequestSchema, GetOperationResponseSchema, GetServiceRevisionRequestSchema, GetServiceRevisionResponseSchema, GetServiceSignInStatusRequestSchema, GetServiceSignInStatusResponseSchema, HoldServiceRequestSchema, HoldServiceResponseSchema, Job, JobAttempt, JobAttemptJson, JobJson, JobSpec, JobSpecJson, JobState, JobStateJson, Keepalive, KeepaliveJson, ListEventsRequestSchema, ListEventsResponseSchema, ListPreviewShareLinksRequestSchema, ListPreviewShareLinksResponseSchema, ListServiceActivationsRequestSchema, ListServiceActivationsResponseSchema, ListServiceRevisionsRequestSchema, ListServiceRevisionsResponseSchema, ListServiceRunsRequestSchema, ListServiceRunsResponseSchema, ListServiceShareLinksRequestSchema, ListServiceShareLinksResponseSchema, Operation, OperationJson, Output, OutputJson, RecordingPolicy, RecordingPolicyJson, ReleaseServiceRequestSchema, ReleaseServiceResponseSchema, RevokePreviewShareLinkRequestSchema, RevokePreviewShareLinkResponseSchema, RevokeServiceShareLinkRequestSchema, RevokeServiceShareLinkResponseSchema, RollbackServiceRequestSchema, RollbackServiceResponseSchema, Sandbox, SandboxJson, SandboxSpec, SandboxSpecJson, SandboxState, SandboxStateJson, Service, ServiceJson, ServiceSpec, ServiceSpecJson, ServiceState, ServiceStateJson, SetServiceModeRequestSchema, SetServiceModeResponseSchema, StartSandboxRequestSchema, StartSandboxResponseSchema, StartServiceRequestSchema, StartServiceResponseSchema, StartServiceSignInRequestSchema, StartServiceSignInResponseSchema, StopSandboxRequestSchema, StopSandboxResponseSchema, StopServiceRequestSchema, StopServiceResponseSchema, WaitOperationRequestSchema, WaitOperationResponseSchema, WakeServiceRequestSchema, WakeServiceResponseSchema, WatchEventsRequestSchema, WatchEventsResponseSchema, WatchGuestLogRequestSchema, WatchGuestLogResponseSchema, WatchOutputRequestSchema, WatchOutputResponseSchema, WatchTelemetryRequestSchema, WatchTelemetryResponseSchema } from "./workspace_pb.js";
 import type { Message } from "@bufbuild/protobuf";
 /**
  * Describes the file toshi/workspace/v1/workloads.proto.
  */
 export declare const file_toshi_workspace_v1_workloads: GenFile;
+/**
+ * @generated from message toshi.workspace.v1.AnswerPromptRequest
+ */
+export type AnswerPromptRequest = Message<"toshi.workspace.v1.AnswerPromptRequest"> & {
+    /**
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The job, sandbox or service whose prompt is answered.
+     *
+     * @generated from field: string workload_id = 3;
+     */
+    workloadId: string;
+    /**
+     * The prompt's id, as its waiting entry gives it.
+     *
+     * @generated from field: string prompt_id = 4;
+     */
+    promptId: string;
+    /**
+     * @generated from field: string answer = 5;
+     */
+    answer: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.AnswerPromptRequest
+ */
+export type AnswerPromptRequestJson = {
+    /**
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The job, sandbox or service whose prompt is answered.
+     *
+     * @generated from field: string workload_id = 3;
+     */
+    workloadId?: string;
+    /**
+     * The prompt's id, as its waiting entry gives it.
+     *
+     * @generated from field: string prompt_id = 4;
+     */
+    promptId?: string;
+    /**
+     * @generated from field: string answer = 5;
+     */
+    answer?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.AnswerPromptRequest.
+ * Use `create(AnswerPromptRequestSchema)` to create a new message.
+ */
+export declare const AnswerPromptRequestSchema: GenMessage<AnswerPromptRequest, {
+    jsonType: AnswerPromptRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.AnswerPromptResponse
+ */
+export type AnswerPromptResponse = Message<"toshi.workspace.v1.AnswerPromptResponse"> & {
+    /**
+     * The AGENT_ANSWERED event.
+     *
+     * @generated from field: toshi.workspace.v1.Event event = 1;
+     */
+    event?: Event | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.AnswerPromptResponse
+ */
+export type AnswerPromptResponseJson = {
+    /**
+     * The AGENT_ANSWERED event.
+     *
+     * @generated from field: toshi.workspace.v1.Event event = 1;
+     */
+    event?: EventJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.AnswerPromptResponse.
+ * Use `create(AnswerPromptResponseSchema)` to create a new message.
+ */
+export declare const AnswerPromptResponseSchema: GenMessage<AnswerPromptResponse, {
+    jsonType: AnswerPromptResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.EmitWorkloadEventRequest
+ */
+export type EmitWorkloadEventRequest = Message<"toshi.workspace.v1.EmitWorkloadEventRequest"> & {
+    /**
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The job, sandbox or service the event is about.
+     *
+     * @generated from field: string workload_id = 3;
+     */
+    workloadId: string;
+    /**
+     * @generated from field: string name = 4;
+     */
+    name: string;
+    /**
+     * JSON, at most 64 KiB; empty for none.
+     *
+     * @generated from field: bytes data = 5;
+     */
+    data: Uint8Array;
+};
+/**
+ * @generated from message toshi.workspace.v1.EmitWorkloadEventRequest
+ */
+export type EmitWorkloadEventRequestJson = {
+    /**
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The job, sandbox or service the event is about.
+     *
+     * @generated from field: string workload_id = 3;
+     */
+    workloadId?: string;
+    /**
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+    /**
+     * JSON, at most 64 KiB; empty for none.
+     *
+     * @generated from field: bytes data = 5;
+     */
+    data?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.EmitWorkloadEventRequest.
+ * Use `create(EmitWorkloadEventRequestSchema)` to create a new message.
+ */
+export declare const EmitWorkloadEventRequestSchema: GenMessage<EmitWorkloadEventRequest, {
+    jsonType: EmitWorkloadEventRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.EmitWorkloadEventResponse
+ */
+export type EmitWorkloadEventResponse = Message<"toshi.workspace.v1.EmitWorkloadEventResponse"> & {
+    /**
+     * The EMITTED event as stored.
+     *
+     * @generated from field: toshi.workspace.v1.Event event = 1;
+     */
+    event?: Event | undefined;
+};
+/**
+ * @generated from message toshi.workspace.v1.EmitWorkloadEventResponse
+ */
+export type EmitWorkloadEventResponseJson = {
+    /**
+     * The EMITTED event as stored.
+     *
+     * @generated from field: toshi.workspace.v1.Event event = 1;
+     */
+    event?: EventJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.EmitWorkloadEventResponse.
+ * Use `create(EmitWorkloadEventResponseSchema)` to create a new message.
+ */
+export declare const EmitWorkloadEventResponseSchema: GenMessage<EmitWorkloadEventResponse, {
+    jsonType: EmitWorkloadEventResponseJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ExportEventsRequest
+ */
+export type ExportEventsRequest = Message<"toshi.workspace.v1.ExportEventsRequest"> & {
+    /**
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * @generated from field: string workload_id = 3;
+     */
+    workloadId: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp since = 4;
+     */
+    since?: Timestamp | undefined;
+    /**
+     * @generated from field: google.protobuf.Timestamp until = 5;
+     */
+    until?: Timestamp | undefined;
+    /**
+     * @generated from field: string cursor = 6;
+     */
+    cursor: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ExportEventsRequest
+ */
+export type ExportEventsRequestJson = {
+    /**
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * @generated from field: string workload_id = 3;
+     */
+    workloadId?: string;
+    /**
+     * @generated from field: google.protobuf.Timestamp since = 4;
+     */
+    since?: TimestampJson;
+    /**
+     * @generated from field: google.protobuf.Timestamp until = 5;
+     */
+    until?: TimestampJson;
+    /**
+     * @generated from field: string cursor = 6;
+     */
+    cursor?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ExportEventsRequest.
+ * Use `create(ExportEventsRequestSchema)` to create a new message.
+ */
+export declare const ExportEventsRequestSchema: GenMessage<ExportEventsRequest, {
+    jsonType: ExportEventsRequestJson;
+}>;
+/**
+ * @generated from message toshi.workspace.v1.ExportEventsResponse
+ */
+export type ExportEventsResponse = Message<"toshi.workspace.v1.ExportEventsResponse"> & {
+    /**
+     * @generated from field: bytes data = 1;
+     */
+    data: Uint8Array;
+    /**
+     * @generated from field: string cursor = 2;
+     */
+    cursor: string;
+};
+/**
+ * @generated from message toshi.workspace.v1.ExportEventsResponse
+ */
+export type ExportEventsResponseJson = {
+    /**
+     * @generated from field: bytes data = 1;
+     */
+    data?: string;
+    /**
+     * @generated from field: string cursor = 2;
+     */
+    cursor?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ExportEventsResponse.
+ * Use `create(ExportEventsResponseSchema)` to create a new message.
+ */
+export declare const ExportEventsResponseSchema: GenMessage<ExportEventsResponse, {
+    jsonType: ExportEventsResponseJson;
+}>;
 /**
  * @generated from message toshi.workspace.v1.CreateJobRequest
  */
@@ -192,6 +478,13 @@ export type GetJobResponse = Message<"toshi.workspace.v1.GetJobResponse"> & {
      * @generated from field: repeated toshi.workspace.v1.BoundBinding bound = 2;
      */
     bound: BoundBinding[];
+    /**
+     * The job's attempts, oldest first: one for each assignment to a
+     * runner, the current one last while the job holds it.
+     *
+     * @generated from field: repeated toshi.workspace.v1.JobAttempt attempts = 3;
+     */
+    attempts: JobAttempt[];
 };
 /**
  * @generated from message toshi.workspace.v1.GetJobResponse
@@ -208,6 +501,13 @@ export type GetJobResponseJson = {
      * @generated from field: repeated toshi.workspace.v1.BoundBinding bound = 2;
      */
     bound?: BoundBindingJson[];
+    /**
+     * The job's attempts, oldest first: one for each assignment to a
+     * runner, the current one last while the job holds it.
+     *
+     * @generated from field: repeated toshi.workspace.v1.JobAttempt attempts = 3;
+     */
+    attempts?: JobAttemptJson[];
 };
 /**
  * Describes the message toshi.workspace.v1.GetJobResponse.
@@ -853,8 +1153,8 @@ export type CreateSandboxRequest = Message<"toshi.workspace.v1.CreateSandboxRequ
      */
     requestKey: string;
     /**
-     * What the sandbox records of its runs: UNSPECIFIED or OFF. STRIP and
-     * VIDEO are a job's, and fail with INVALID_ARGUMENT.
+     * What the sandbox records of its runs: UNSPECIFIED, OFF or STRIP. VIDEO
+     * is a job's, and fails with INVALID_ARGUMENT.
      *
      * @generated from field: toshi.workspace.v1.RecordingPolicy recording = 6;
      */
@@ -889,8 +1189,8 @@ export type CreateSandboxRequestJson = {
      */
     requestKey?: string;
     /**
-     * What the sandbox records of its runs: UNSPECIFIED or OFF. STRIP and
-     * VIDEO are a job's, and fail with INVALID_ARGUMENT.
+     * What the sandbox records of its runs: UNSPECIFIED, OFF or STRIP. VIDEO
+     * is a job's, and fails with INVALID_ARGUMENT.
      *
      * @generated from field: toshi.workspace.v1.RecordingPolicy recording = 6;
      */
@@ -944,6 +1244,14 @@ export type GetSandboxRequest = Message<"toshi.workspace.v1.GetSandboxRequest">
      * @generated from field: string id = 3;
      */
     id: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 4;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.GetSandboxRequest
@@ -961,6 +1269,14 @@ export type GetSandboxRequestJson = {
      * @generated from field: string id = 3;
      */
     id?: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 4;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.GetSandboxRequest.
@@ -1047,6 +1363,14 @@ export type ListSandboxesRequest = Message<"toshi.workspace.v1.ListSandboxesRequ
     labels: {
         [key: string]: string;
     };
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 7;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.ListSandboxesRequest
@@ -1087,6 +1411,14 @@ export type ListSandboxesRequestJson = {
     labels?: {
         [key: string]: string;
     };
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 7;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.ListSandboxesRequest.
@@ -1178,6 +1510,14 @@ export type UpdateSandboxRequest = Message<"toshi.workspace.v1.UpdateSandboxRequ
      * @generated from field: string request_key = 6;
      */
     requestKey: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 7;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.UpdateSandboxRequest
@@ -1209,6 +1549,14 @@ export type UpdateSandboxRequestJson = {
      * @generated from field: string request_key = 6;
      */
     requestKey?: string;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 7;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.UpdateSandboxRequest.
@@ -1358,6 +1706,14 @@ export type WaitSandboxRequest = Message<"toshi.workspace.v1.WaitSandboxRequest"
      * @generated from field: google.protobuf.Duration timeout = 5;
      */
     timeout?: Duration | undefined;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 6;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.WaitSandboxRequest
@@ -1387,6 +1743,14 @@ export type WaitSandboxRequestJson = {
      * @generated from field: google.protobuf.Duration timeout = 5;
      */
     timeout?: DurationJson;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 6;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.WaitSandboxRequest.
@@ -1457,6 +1821,14 @@ export type WatchSandboxesRequest = Message<"toshi.workspace.v1.WatchSandboxesRe
      * @generated from field: bool keepalive = 4;
      */
     keepalive: boolean;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 5;
+     */
+    grant: string;
 };
 /**
  * @generated from message toshi.workspace.v1.WatchSandboxesRequest
@@ -1483,6 +1855,14 @@ export type WatchSandboxesRequestJson = {
      * @generated from field: bool keepalive = 4;
      */
     keepalive?: boolean;
+    /**
+     * A grant the caller's workspace received, to act on the owner's
+     * sandbox through it (docs/grants.md); project and environment are then
+     * left empty.
+     *
+     * @generated from field: string grant = 5;
+     */
+    grant?: string;
 };
 /**
  * Describes the message toshi.workspace.v1.WatchSandboxesRequest.
@@ -1891,6 +2271,11 @@ export type UpdateServiceRequest = Message<"toshi.workspace.v1.UpdateServiceRequ
      */
     service?: Service | undefined;
     /**
+     * The paths managed_by, manifest_digest, manifest_origin and managed_fields
+     * set the management mark and go together: all four or none, and on their
+     * own; managed_by "manifest" needs the digest, an origin and at least one
+     * field path, and an empty managed_by clears all four.
+     *
      * @generated from field: google.protobuf.FieldMask update_mask = 5;
      */
     updateMask?: FieldMask | undefined;
@@ -1898,6 +2283,18 @@ export type UpdateServiceRequest = Message<"toshi.workspace.v1.UpdateServiceRequ
      * @generated from field: string request_key = 6;
      */
     requestKey: string;
+    /**
+     * Lets a deploy to a started service with a state volume start the new
+     * revision without a saved version of the volume when none can be saved:
+     * the run's pre_save refused, the save did not finish within the upgrade
+     * window, or this control plane keeps no volume versions. A rollback then
+     * has no version to restore. Without it, such a deploy is rolled back
+     * before the revision starts, or, with no volume versions kept, refused
+     * with FAILED_PRECONDITION.
+     *
+     * @generated from field: bool allow_unsaved_volume = 7;
+     */
+    allowUnsavedVolume: boolean;
 };
 /**
  * @generated from message toshi.workspace.v1.UpdateServiceRequest
@@ -1922,6 +2319,11 @@ export type UpdateServiceRequestJson = {
      */
     service?: ServiceJson;
     /**
+     * The paths managed_by, manifest_digest, manifest_origin and managed_fields
+     * set the management mark and go together: all four or none, and on their
+     * own; managed_by "manifest" needs the digest, an origin and at least one
+     * field path, and an empty managed_by clears all four.
+     *
      * @generated from field: google.protobuf.FieldMask update_mask = 5;
      */
     updateMask?: FieldMaskJson;
@@ -1929,6 +2331,18 @@ export type UpdateServiceRequestJson = {
      * @generated from field: string request_key = 6;
      */
     requestKey?: string;
+    /**
+     * Lets a deploy to a started service with a state volume start the new
+     * revision without a saved version of the volume when none can be saved:
+     * the run's pre_save refused, the save did not finish within the upgrade
+     * window, or this control plane keeps no volume versions. A rollback then
+     * has no version to restore. Without it, such a deploy is rolled back
+     * before the revision starts, or, with no volume versions kept, refused
+     * with FAILED_PRECONDITION.
+     *
+     * @generated from field: bool allow_unsaved_volume = 7;
+     */
+    allowUnsavedVolume?: boolean;
 };
 /**
  * Describes the message toshi.workspace.v1.UpdateServiceRequest.
@@ -2265,59 +2679,1253 @@ export declare const WatchServicesResponseSchema: GenMessage<WatchServicesRespon
     jsonType: WatchServicesResponseJson;
 }>;
 /**
- * WorkloadService holds the Workspace API's three resources, Job, Sandbox
- * and Service, and the events and operations that span them. The three
- * share one state model, one event log and one id space: an id names a job,
- * a sandbox or a service, and a call of one type given the id of another
- * fails with NOT_FOUND.
- *
- * The caller's credential names the workspace; every request names the
- * project and the environment in its project and environment fields, and a
- * call that leaves either empty fails with INVALID_ARGUMENT. The environment
- * is one of the project's environments; a project or environment the
- * workspace does not have is NOT_FOUND. A job, sandbox, service, execution,
- * operation or event of another project or environment is NOT_FOUND.
- *
- * Every mutating call takes a request_key. A key is bound to the workspace,
- * the call and the request's payload: a retry with the same key and the same
- * payload returns what the first call returned and starts nothing new; the
- * same key with a different payload fails with FAILED_PRECONDITION. A create
- * requires a key: a create without one fails with INVALID_ARGUMENT. For the
- * other calls an empty key means no retry protection. CancelJob takes none:
- * a repeat of it changes nothing.
- *
- * A caller over its rate limit gets RESOURCE_EXHAUSTED with a
- * google.rpc.RetryInfo detail: the delay before a retry, on every protocol.
- * The same whole seconds are in a Retry-After response header on Connect and
- * gRPC-Web calls and on gRPC streams, and in the trailing metadata of a gRPC
- * unary call.
+ * ServiceAlarm is one of a service's alarms: a schedule, the event it
+ * publishes on one of the service's event channels, and the instant it
+ * next publishes.
  *
- * @generated from service toshi.workspace.v1.WorkloadService
+ * @generated from message toshi.workspace.v1.ServiceAlarm
  */
-export declare const WorkloadService: GenService<{
+export type ServiceAlarm = Message<"toshi.workspace.v1.ServiceAlarm"> & {
     /**
-     * CreateJob creates a job and returns it. With wait_for_end set, the call
-     * blocks until the job ends or the bound passes. If the job has ended when
-     * the call answers, the answer carries its exit status and output without
-     * a second read; otherwise it carries the job as it is and no output, and
-     * no later call returns it.
+     * The alarm's name within the service.
      *
-     * @generated from rpc toshi.workspace.v1.WorkloadService.CreateJob
+     * @generated from field: string name = 1;
      */
-    createJob: {
-        methodKind: "unary";
-        input: typeof CreateJobRequestSchema;
-        output: typeof CreateJobResponseSchema;
-    };
+    name: string;
     /**
-     * GetJob returns one job. An unknown ID fails with NOT_FOUND.
+     * Rises each time the alarm is replaced; an occurrence names the
+     * generation it belongs to.
      *
-     * @generated from rpc toshi.workspace.v1.WorkloadService.GetJob
+     * @generated from field: int64 generation = 2;
      */
-    getJob: {
-        methodKind: "unary";
-        input: typeof GetJobRequestSchema;
-        output: typeof GetJobResponseSchema;
+    generation: bigint;
+    /**
+     * The schedule: a cron expression in timezone, or a single instant.
+     *
+     * @generated from oneof toshi.workspace.v1.ServiceAlarm.schedule
+     */
+    schedule: {
+        /**
+         * A five-field cron expression, in timezone's wall clock.
+         *
+         * @generated from field: string cron = 3;
+         */
+        value: string;
+        case: "cron";
+    } | {
+        /**
+         * A single instant, after which the alarm has no next instant.
+         *
+         * @generated from field: google.protobuf.Timestamp at = 4;
+         */
+        value: Timestamp;
+        case: "at";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * The IANA zone of the schedule's wall clock; empty for UTC.
+     *
+     * @generated from field: string timezone = 5;
+     */
+    timezone: string;
+    /**
+     * The name of the service's event channel it publishes on.
+     *
+     * @generated from field: string channel = 6;
+     */
+    channel: string;
+    /**
+     * The event name it publishes.
+     *
+     * @generated from field: string event = 7;
+     */
+    event: string;
+    /**
+     * The message's JSON, empty for null.
+     *
+     * @generated from field: bytes data = 8;
+     */
+    data: Uint8Array;
+    /**
+     * What it does with the instants it missed.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarmMisfire misfire = 9;
+     */
+    misfire: ServiceAlarmMisfire;
+    /**
+     * How late a missed instant may be published as on time.
+     *
+     * @generated from field: google.protobuf.Duration starting_deadline = 10;
+     */
+    startingDeadline?: Duration | undefined;
+    /**
+     * Whether it is paused: a paused alarm publishes nothing until resumed.
+     *
+     * @generated from field: bool paused = 11;
+     */
+    paused: boolean;
+    /**
+     * The instant it next publishes; unset when no instant is left.
+     *
+     * @generated from field: google.protobuf.Timestamp next_at = 12;
+     */
+    nextAt?: Timestamp | undefined;
+    /**
+     * When it was created.
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 13;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * When it was last set, replaced, paused or resumed.
+     *
+     * @generated from field: google.protobuf.Timestamp updated_at = 14;
+     */
+    updatedAt?: Timestamp | undefined;
+};
+/**
+ * ServiceAlarm is one of a service's alarms: a schedule, the event it
+ * publishes on one of the service's event channels, and the instant it
+ * next publishes.
+ *
+ * @generated from message toshi.workspace.v1.ServiceAlarm
+ */
+export type ServiceAlarmJson = {
+    /**
+     * The alarm's name within the service.
+     *
+     * @generated from field: string name = 1;
+     */
+    name?: string;
+    /**
+     * Rises each time the alarm is replaced; an occurrence names the
+     * generation it belongs to.
+     *
+     * @generated from field: int64 generation = 2;
+     */
+    generation?: string;
+    /**
+     * A five-field cron expression, in timezone's wall clock.
+     *
+     * @generated from field: string cron = 3;
+     */
+    cron?: string;
+    /**
+     * A single instant, after which the alarm has no next instant.
+     *
+     * @generated from field: google.protobuf.Timestamp at = 4;
+     */
+    at?: TimestampJson;
+    /**
+     * The IANA zone of the schedule's wall clock; empty for UTC.
+     *
+     * @generated from field: string timezone = 5;
+     */
+    timezone?: string;
+    /**
+     * The name of the service's event channel it publishes on.
+     *
+     * @generated from field: string channel = 6;
+     */
+    channel?: string;
+    /**
+     * The event name it publishes.
+     *
+     * @generated from field: string event = 7;
+     */
+    event?: string;
+    /**
+     * The message's JSON, empty for null.
+     *
+     * @generated from field: bytes data = 8;
+     */
+    data?: string;
+    /**
+     * What it does with the instants it missed.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarmMisfire misfire = 9;
+     */
+    misfire?: ServiceAlarmMisfireJson;
+    /**
+     * How late a missed instant may be published as on time.
+     *
+     * @generated from field: google.protobuf.Duration starting_deadline = 10;
+     */
+    startingDeadline?: DurationJson;
+    /**
+     * Whether it is paused: a paused alarm publishes nothing until resumed.
+     *
+     * @generated from field: bool paused = 11;
+     */
+    paused?: boolean;
+    /**
+     * The instant it next publishes; unset when no instant is left.
+     *
+     * @generated from field: google.protobuf.Timestamp next_at = 12;
+     */
+    nextAt?: TimestampJson;
+    /**
+     * When it was created.
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 13;
+     */
+    createdAt?: TimestampJson;
+    /**
+     * When it was last set, replaced, paused or resumed.
+     *
+     * @generated from field: google.protobuf.Timestamp updated_at = 14;
+     */
+    updatedAt?: TimestampJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.ServiceAlarm.
+ * Use `create(ServiceAlarmSchema)` to create a new message.
+ */
+export declare const ServiceAlarmSchema: GenMessage<ServiceAlarm, {
+    jsonType: ServiceAlarmJson;
+}>;
+/**
+ * ServiceAlarmOccurrence is one instant an alarm published for.
+ *
+ * @generated from message toshi.workspace.v1.ServiceAlarmOccurrence
+ */
+export type ServiceAlarmOccurrence = Message<"toshi.workspace.v1.ServiceAlarmOccurrence"> & {
+    /**
+     * The alarm's generation the occurrence belongs to.
+     *
+     * @generated from field: int64 generation = 1;
+     */
+    generation: bigint;
+    /**
+     * The instant of the schedule it is for; a manual occurrence's is the
+     * call's time.
+     *
+     * @generated from field: google.protobuf.Timestamp scheduled_for = 2;
+     */
+    scheduledFor?: Timestamp | undefined;
+    /**
+     * Whether RunServiceAlarmNow made it, rather than the schedule.
+     *
+     * @generated from field: bool manual = 3;
+     */
+    manual: boolean;
+    /**
+     * Who ran it, as the audit log names an actor; empty for a scheduled
+     * occurrence.
+     *
+     * @generated from field: string caller = 4;
+     */
+    caller: string;
+    /**
+     * When the occurrence was recorded.
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 5;
+     */
+    createdAt?: Timestamp | undefined;
+    /**
+     * When its message was published; unset while unpublished.
+     *
+     * @generated from field: google.protobuf.Timestamp published_at = 6;
+     */
+    publishedAt?: Timestamp | undefined;
+    /**
+     * The published message's ID; empty while unpublished.
+     *
+     * @generated from field: string message_id = 7;
+     */
+    messageId: string;
+    /**
+     * Why the publication failed; empty when it did not.
+     *
+     * @generated from field: string error = 8;
+     */
+    error: string;
+};
+/**
+ * ServiceAlarmOccurrence is one instant an alarm published for.
+ *
+ * @generated from message toshi.workspace.v1.ServiceAlarmOccurrence
+ */
+export type ServiceAlarmOccurrenceJson = {
+    /**
+     * The alarm's generation the occurrence belongs to.
+     *
+     * @generated from field: int64 generation = 1;
+     */
+    generation?: string;
+    /**
+     * The instant of the schedule it is for; a manual occurrence's is the
+     * call's time.
+     *
+     * @generated from field: google.protobuf.Timestamp scheduled_for = 2;
+     */
+    scheduledFor?: TimestampJson;
+    /**
+     * Whether RunServiceAlarmNow made it, rather than the schedule.
+     *
+     * @generated from field: bool manual = 3;
+     */
+    manual?: boolean;
+    /**
+     * Who ran it, as the audit log names an actor; empty for a scheduled
+     * occurrence.
+     *
+     * @generated from field: string caller = 4;
+     */
+    caller?: string;
+    /**
+     * When the occurrence was recorded.
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 5;
+     */
+    createdAt?: TimestampJson;
+    /**
+     * When its message was published; unset while unpublished.
+     *
+     * @generated from field: google.protobuf.Timestamp published_at = 6;
+     */
+    publishedAt?: TimestampJson;
+    /**
+     * The published message's ID; empty while unpublished.
+     *
+     * @generated from field: string message_id = 7;
+     */
+    messageId?: string;
+    /**
+     * Why the publication failed; empty when it did not.
+     *
+     * @generated from field: string error = 8;
+     */
+    error?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ServiceAlarmOccurrence.
+ * Use `create(ServiceAlarmOccurrenceSchema)` to create a new message.
+ */
+export declare const ServiceAlarmOccurrenceSchema: GenMessage<ServiceAlarmOccurrence, {
+    jsonType: ServiceAlarmOccurrenceJson;
+}>;
+/**
+ * SetServiceAlarmRequest is a call of SetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.SetServiceAlarmRequest
+ */
+export type SetServiceAlarmRequest = Message<"toshi.workspace.v1.SetServiceAlarmRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+    /**
+     * The alarm's name within the service.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+    /**
+     * The schedule: a cron expression in timezone, or a single instant.
+     *
+     * @generated from oneof toshi.workspace.v1.SetServiceAlarmRequest.schedule
+     */
+    schedule: {
+        /**
+         * A five-field cron expression, in timezone's wall clock.
+         *
+         * @generated from field: string cron = 5;
+         */
+        value: string;
+        case: "cron";
+    } | {
+        /**
+         * A single instant, which must be in the future.
+         *
+         * @generated from field: google.protobuf.Timestamp at = 6;
+         */
+        value: Timestamp;
+        case: "at";
+    } | {
+        case: undefined;
+        value?: undefined;
+    };
+    /**
+     * The IANA zone of the schedule's wall clock; empty for UTC.
+     *
+     * @generated from field: string timezone = 7;
+     */
+    timezone: string;
+    /**
+     * The name of the service's event channel to publish on.
+     *
+     * @generated from field: string channel = 8;
+     */
+    channel: string;
+    /**
+     * The event name to publish.
+     *
+     * @generated from field: string event = 9;
+     */
+    event: string;
+    /**
+     * The message's JSON, empty for null.
+     *
+     * @generated from field: bytes data = 10;
+     */
+    data: Uint8Array;
+    /**
+     * What it does with the instants it missed; unspecified means COALESCE.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarmMisfire misfire = 11;
+     */
+    misfire: ServiceAlarmMisfire;
+    /**
+     * How late a missed instant may be published as on time; unset means
+     * 10 minutes.
+     *
+     * @generated from field: google.protobuf.Duration starting_deadline = 12;
+     */
+    startingDeadline?: Duration | undefined;
+};
+/**
+ * SetServiceAlarmRequest is a call of SetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.SetServiceAlarmRequest
+ */
+export type SetServiceAlarmRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+    /**
+     * The alarm's name within the service.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+    /**
+     * A five-field cron expression, in timezone's wall clock.
+     *
+     * @generated from field: string cron = 5;
+     */
+    cron?: string;
+    /**
+     * A single instant, which must be in the future.
+     *
+     * @generated from field: google.protobuf.Timestamp at = 6;
+     */
+    at?: TimestampJson;
+    /**
+     * The IANA zone of the schedule's wall clock; empty for UTC.
+     *
+     * @generated from field: string timezone = 7;
+     */
+    timezone?: string;
+    /**
+     * The name of the service's event channel to publish on.
+     *
+     * @generated from field: string channel = 8;
+     */
+    channel?: string;
+    /**
+     * The event name to publish.
+     *
+     * @generated from field: string event = 9;
+     */
+    event?: string;
+    /**
+     * The message's JSON, empty for null.
+     *
+     * @generated from field: bytes data = 10;
+     */
+    data?: string;
+    /**
+     * What it does with the instants it missed; unspecified means COALESCE.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarmMisfire misfire = 11;
+     */
+    misfire?: ServiceAlarmMisfireJson;
+    /**
+     * How late a missed instant may be published as on time; unset means
+     * 10 minutes.
+     *
+     * @generated from field: google.protobuf.Duration starting_deadline = 12;
+     */
+    startingDeadline?: DurationJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.SetServiceAlarmRequest.
+ * Use `create(SetServiceAlarmRequestSchema)` to create a new message.
+ */
+export declare const SetServiceAlarmRequestSchema: GenMessage<SetServiceAlarmRequest, {
+    jsonType: SetServiceAlarmRequestJson;
+}>;
+/**
+ * SetServiceAlarmResponse is the answer to SetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.SetServiceAlarmResponse
+ */
+export type SetServiceAlarmResponse = Message<"toshi.workspace.v1.SetServiceAlarmResponse"> & {
+    /**
+     * The alarm as it was set.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarm | undefined;
+};
+/**
+ * SetServiceAlarmResponse is the answer to SetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.SetServiceAlarmResponse
+ */
+export type SetServiceAlarmResponseJson = {
+    /**
+     * The alarm as it was set.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarmJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.SetServiceAlarmResponse.
+ * Use `create(SetServiceAlarmResponseSchema)` to create a new message.
+ */
+export declare const SetServiceAlarmResponseSchema: GenMessage<SetServiceAlarmResponse, {
+    jsonType: SetServiceAlarmResponseJson;
+}>;
+/**
+ * GetServiceAlarmRequest is a call of GetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.GetServiceAlarmRequest
+ */
+export type GetServiceAlarmRequest = Message<"toshi.workspace.v1.GetServiceAlarmRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+};
+/**
+ * GetServiceAlarmRequest is a call of GetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.GetServiceAlarmRequest
+ */
+export type GetServiceAlarmRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.GetServiceAlarmRequest.
+ * Use `create(GetServiceAlarmRequestSchema)` to create a new message.
+ */
+export declare const GetServiceAlarmRequestSchema: GenMessage<GetServiceAlarmRequest, {
+    jsonType: GetServiceAlarmRequestJson;
+}>;
+/**
+ * GetServiceAlarmResponse is the answer to GetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.GetServiceAlarmResponse
+ */
+export type GetServiceAlarmResponse = Message<"toshi.workspace.v1.GetServiceAlarmResponse"> & {
+    /**
+     * The alarm.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarm | undefined;
+    /**
+     * Its most recent occurrences, newest first, at most 20.
+     *
+     * @generated from field: repeated toshi.workspace.v1.ServiceAlarmOccurrence occurrences = 2;
+     */
+    occurrences: ServiceAlarmOccurrence[];
+};
+/**
+ * GetServiceAlarmResponse is the answer to GetServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.GetServiceAlarmResponse
+ */
+export type GetServiceAlarmResponseJson = {
+    /**
+     * The alarm.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarmJson;
+    /**
+     * Its most recent occurrences, newest first, at most 20.
+     *
+     * @generated from field: repeated toshi.workspace.v1.ServiceAlarmOccurrence occurrences = 2;
+     */
+    occurrences?: ServiceAlarmOccurrenceJson[];
+};
+/**
+ * Describes the message toshi.workspace.v1.GetServiceAlarmResponse.
+ * Use `create(GetServiceAlarmResponseSchema)` to create a new message.
+ */
+export declare const GetServiceAlarmResponseSchema: GenMessage<GetServiceAlarmResponse, {
+    jsonType: GetServiceAlarmResponseJson;
+}>;
+/**
+ * ListServiceAlarmsRequest is a call of ListServiceAlarms.
+ *
+ * @generated from message toshi.workspace.v1.ListServiceAlarmsRequest
+ */
+export type ListServiceAlarmsRequest = Message<"toshi.workspace.v1.ListServiceAlarmsRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+};
+/**
+ * ListServiceAlarmsRequest is a call of ListServiceAlarms.
+ *
+ * @generated from message toshi.workspace.v1.ListServiceAlarmsRequest
+ */
+export type ListServiceAlarmsRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ListServiceAlarmsRequest.
+ * Use `create(ListServiceAlarmsRequestSchema)` to create a new message.
+ */
+export declare const ListServiceAlarmsRequestSchema: GenMessage<ListServiceAlarmsRequest, {
+    jsonType: ListServiceAlarmsRequestJson;
+}>;
+/**
+ * ListServiceAlarmsResponse is the answer to ListServiceAlarms.
+ *
+ * @generated from message toshi.workspace.v1.ListServiceAlarmsResponse
+ */
+export type ListServiceAlarmsResponse = Message<"toshi.workspace.v1.ListServiceAlarmsResponse"> & {
+    /**
+     * The service's alarms, by name.
+     *
+     * @generated from field: repeated toshi.workspace.v1.ServiceAlarm alarms = 1;
+     */
+    alarms: ServiceAlarm[];
+};
+/**
+ * ListServiceAlarmsResponse is the answer to ListServiceAlarms.
+ *
+ * @generated from message toshi.workspace.v1.ListServiceAlarmsResponse
+ */
+export type ListServiceAlarmsResponseJson = {
+    /**
+     * The service's alarms, by name.
+     *
+     * @generated from field: repeated toshi.workspace.v1.ServiceAlarm alarms = 1;
+     */
+    alarms?: ServiceAlarmJson[];
+};
+/**
+ * Describes the message toshi.workspace.v1.ListServiceAlarmsResponse.
+ * Use `create(ListServiceAlarmsResponseSchema)` to create a new message.
+ */
+export declare const ListServiceAlarmsResponseSchema: GenMessage<ListServiceAlarmsResponse, {
+    jsonType: ListServiceAlarmsResponseJson;
+}>;
+/**
+ * DeleteServiceAlarmRequest is a call of DeleteServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.DeleteServiceAlarmRequest
+ */
+export type DeleteServiceAlarmRequest = Message<"toshi.workspace.v1.DeleteServiceAlarmRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+};
+/**
+ * DeleteServiceAlarmRequest is a call of DeleteServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.DeleteServiceAlarmRequest
+ */
+export type DeleteServiceAlarmRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.DeleteServiceAlarmRequest.
+ * Use `create(DeleteServiceAlarmRequestSchema)` to create a new message.
+ */
+export declare const DeleteServiceAlarmRequestSchema: GenMessage<DeleteServiceAlarmRequest, {
+    jsonType: DeleteServiceAlarmRequestJson;
+}>;
+/**
+ * DeleteServiceAlarmResponse is the answer to DeleteServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.DeleteServiceAlarmResponse
+ */
+export type DeleteServiceAlarmResponse = Message<"toshi.workspace.v1.DeleteServiceAlarmResponse"> & {};
+/**
+ * DeleteServiceAlarmResponse is the answer to DeleteServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.DeleteServiceAlarmResponse
+ */
+export type DeleteServiceAlarmResponseJson = {};
+/**
+ * Describes the message toshi.workspace.v1.DeleteServiceAlarmResponse.
+ * Use `create(DeleteServiceAlarmResponseSchema)` to create a new message.
+ */
+export declare const DeleteServiceAlarmResponseSchema: GenMessage<DeleteServiceAlarmResponse, {
+    jsonType: DeleteServiceAlarmResponseJson;
+}>;
+/**
+ * PauseServiceAlarmRequest is a call of PauseServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.PauseServiceAlarmRequest
+ */
+export type PauseServiceAlarmRequest = Message<"toshi.workspace.v1.PauseServiceAlarmRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+};
+/**
+ * PauseServiceAlarmRequest is a call of PauseServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.PauseServiceAlarmRequest
+ */
+export type PauseServiceAlarmRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.PauseServiceAlarmRequest.
+ * Use `create(PauseServiceAlarmRequestSchema)` to create a new message.
+ */
+export declare const PauseServiceAlarmRequestSchema: GenMessage<PauseServiceAlarmRequest, {
+    jsonType: PauseServiceAlarmRequestJson;
+}>;
+/**
+ * PauseServiceAlarmResponse is the answer to PauseServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.PauseServiceAlarmResponse
+ */
+export type PauseServiceAlarmResponse = Message<"toshi.workspace.v1.PauseServiceAlarmResponse"> & {
+    /**
+     * The alarm as it is.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarm | undefined;
+};
+/**
+ * PauseServiceAlarmResponse is the answer to PauseServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.PauseServiceAlarmResponse
+ */
+export type PauseServiceAlarmResponseJson = {
+    /**
+     * The alarm as it is.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarmJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.PauseServiceAlarmResponse.
+ * Use `create(PauseServiceAlarmResponseSchema)` to create a new message.
+ */
+export declare const PauseServiceAlarmResponseSchema: GenMessage<PauseServiceAlarmResponse, {
+    jsonType: PauseServiceAlarmResponseJson;
+}>;
+/**
+ * ResumeServiceAlarmRequest is a call of ResumeServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.ResumeServiceAlarmRequest
+ */
+export type ResumeServiceAlarmRequest = Message<"toshi.workspace.v1.ResumeServiceAlarmRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+};
+/**
+ * ResumeServiceAlarmRequest is a call of ResumeServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.ResumeServiceAlarmRequest
+ */
+export type ResumeServiceAlarmRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.ResumeServiceAlarmRequest.
+ * Use `create(ResumeServiceAlarmRequestSchema)` to create a new message.
+ */
+export declare const ResumeServiceAlarmRequestSchema: GenMessage<ResumeServiceAlarmRequest, {
+    jsonType: ResumeServiceAlarmRequestJson;
+}>;
+/**
+ * ResumeServiceAlarmResponse is the answer to ResumeServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.ResumeServiceAlarmResponse
+ */
+export type ResumeServiceAlarmResponse = Message<"toshi.workspace.v1.ResumeServiceAlarmResponse"> & {
+    /**
+     * The alarm as it is.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarm | undefined;
+};
+/**
+ * ResumeServiceAlarmResponse is the answer to ResumeServiceAlarm.
+ *
+ * @generated from message toshi.workspace.v1.ResumeServiceAlarmResponse
+ */
+export type ResumeServiceAlarmResponseJson = {
+    /**
+     * The alarm as it is.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarm alarm = 1;
+     */
+    alarm?: ServiceAlarmJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.ResumeServiceAlarmResponse.
+ * Use `create(ResumeServiceAlarmResponseSchema)` to create a new message.
+ */
+export declare const ResumeServiceAlarmResponseSchema: GenMessage<ResumeServiceAlarmResponse, {
+    jsonType: ResumeServiceAlarmResponseJson;
+}>;
+/**
+ * RunServiceAlarmNowRequest is a call of RunServiceAlarmNow.
+ *
+ * @generated from message toshi.workspace.v1.RunServiceAlarmNowRequest
+ */
+export type RunServiceAlarmNowRequest = Message<"toshi.workspace.v1.RunServiceAlarmNowRequest"> & {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+    /**
+     * @generated from field: string request_key = 5;
+     */
+    requestKey: string;
+};
+/**
+ * RunServiceAlarmNowRequest is a call of RunServiceAlarmNow.
+ *
+ * @generated from message toshi.workspace.v1.RunServiceAlarmNowRequest
+ */
+export type RunServiceAlarmNowRequestJson = {
+    /**
+     * The service's project.
+     *
+     * @generated from field: string project = 1;
+     */
+    project?: string;
+    /**
+     * The service's environment.
+     *
+     * @generated from field: string environment = 2;
+     */
+    environment?: string;
+    /**
+     * The service's ID.
+     *
+     * @generated from field: string service_id = 3;
+     */
+    serviceId?: string;
+    /**
+     * The alarm's name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name?: string;
+    /**
+     * @generated from field: string request_key = 5;
+     */
+    requestKey?: string;
+};
+/**
+ * Describes the message toshi.workspace.v1.RunServiceAlarmNowRequest.
+ * Use `create(RunServiceAlarmNowRequestSchema)` to create a new message.
+ */
+export declare const RunServiceAlarmNowRequestSchema: GenMessage<RunServiceAlarmNowRequest, {
+    jsonType: RunServiceAlarmNowRequestJson;
+}>;
+/**
+ * RunServiceAlarmNowResponse is the answer to RunServiceAlarmNow.
+ *
+ * @generated from message toshi.workspace.v1.RunServiceAlarmNowResponse
+ */
+export type RunServiceAlarmNowResponse = Message<"toshi.workspace.v1.RunServiceAlarmNowResponse"> & {
+    /**
+     * The occurrence it published.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarmOccurrence occurrence = 1;
+     */
+    occurrence?: ServiceAlarmOccurrence | undefined;
+};
+/**
+ * RunServiceAlarmNowResponse is the answer to RunServiceAlarmNow.
+ *
+ * @generated from message toshi.workspace.v1.RunServiceAlarmNowResponse
+ */
+export type RunServiceAlarmNowResponseJson = {
+    /**
+     * The occurrence it published.
+     *
+     * @generated from field: toshi.workspace.v1.ServiceAlarmOccurrence occurrence = 1;
+     */
+    occurrence?: ServiceAlarmOccurrenceJson;
+};
+/**
+ * Describes the message toshi.workspace.v1.RunServiceAlarmNowResponse.
+ * Use `create(RunServiceAlarmNowResponseSchema)` to create a new message.
+ */
+export declare const RunServiceAlarmNowResponseSchema: GenMessage<RunServiceAlarmNowResponse, {
+    jsonType: RunServiceAlarmNowResponseJson;
+}>;
+/**
+ * ServiceAlarmMisfire is what an alarm does with the instants of its
+ * schedule it missed.
+ *
+ * @generated from enum toshi.workspace.v1.ServiceAlarmMisfire
+ */
+export declare enum ServiceAlarmMisfire {
+    /**
+     * The same as COALESCE.
+     *
+     * @generated from enum value: SERVICE_ALARM_MISFIRE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Publishes one message for the instants missed by more than the
+     * starting deadline.
+     *
+     * @generated from enum value: SERVICE_ALARM_MISFIRE_COALESCE = 1;
+     */
+    COALESCE = 1,
+    /**
+     * Publishes a message for each missed instant, oldest first.
+     *
+     * @generated from enum value: SERVICE_ALARM_MISFIRE_ALL = 2;
+     */
+    ALL = 2,
+    /**
+     * Publishes none for missed instants.
+     *
+     * @generated from enum value: SERVICE_ALARM_MISFIRE_SKIP = 3;
+     */
+    SKIP = 3
+}
+/**
+ * ServiceAlarmMisfire is what an alarm does with the instants of its
+ * schedule it missed.
+ *
+ * @generated from enum toshi.workspace.v1.ServiceAlarmMisfire
+ */
+export type ServiceAlarmMisfireJson = "SERVICE_ALARM_MISFIRE_UNSPECIFIED" | "SERVICE_ALARM_MISFIRE_COALESCE" | "SERVICE_ALARM_MISFIRE_ALL" | "SERVICE_ALARM_MISFIRE_SKIP";
+/**
+ * Describes the enum toshi.workspace.v1.ServiceAlarmMisfire.
+ */
+export declare const ServiceAlarmMisfireSchema: GenEnum<ServiceAlarmMisfire, ServiceAlarmMisfireJson>;
+/**
+ * WorkloadService holds the Workspace API's three resources, Job, Sandbox
+ * and Service, and the events and operations that span them. The three
+ * share one state model, one event log and one id space: an id names a job,
+ * a sandbox or a service, and a call of one type given the id of another
+ * fails with NOT_FOUND.
+ *
+ * The caller's credential names the workspace; every request names the
+ * project and the environment in its project and environment fields, and a
+ * call that leaves either empty fails with INVALID_ARGUMENT. The environment
+ * is one of the project's environments; a project or environment the
+ * workspace does not have is NOT_FOUND. A job, sandbox, service, execution,
+ * operation or event of another project or environment is NOT_FOUND.
+ *
+ * Every mutating call but CancelJob, AnswerPrompt, EmitWorkloadEvent and the
+ * service alarm calls other than RunServiceAlarmNow takes a request_key. A
+ * key is bound to the workspace, the call and the request's payload: a retry
+ * with the same key and the same payload returns what the first call returned
+ * and starts nothing new; the same key with a different payload fails with
+ * FAILED_PRECONDITION. A create requires a key: a create without one fails
+ * with INVALID_ARGUMENT. For the other calls an empty key means no retry
+ * protection. CancelJob takes none: a repeat of it changes nothing. The other
+ * service alarm calls take none.
+ *
+ * A caller over its rate limit gets RESOURCE_EXHAUSTED with a
+ * google.rpc.RetryInfo detail: the delay before a retry, on every protocol.
+ * The same whole seconds are in a Retry-After response header on Connect and
+ * gRPC-Web calls and on gRPC streams, and in the trailing metadata of a gRPC
+ * unary call.
+ *
+ * @generated from service toshi.workspace.v1.WorkloadService
+ */
+export declare const WorkloadService: GenService<{
+    /**
+     * CreateJob creates a job and returns it. With wait_for_end set, the call
+     * blocks until the job ends or the bound passes. If the job has ended when
+     * the call answers, the answer carries its exit status and output without
+     * a second read; otherwise it carries the job as it is and no output, and
+     * no later call returns it.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.CreateJob
+     */
+    createJob: {
+        methodKind: "unary";
+        input: typeof CreateJobRequestSchema;
+        output: typeof CreateJobResponseSchema;
+    };
+    /**
+     * GetJob returns one job. An unknown ID fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.GetJob
+     */
+    getJob: {
+        methodKind: "unary";
+        input: typeof GetJobRequestSchema;
+        output: typeof GetJobResponseSchema;
     };
     /**
      * ListJobs returns the jobs that match every filter that is set, oldest
@@ -2494,6 +4102,31 @@ export declare const WorkloadService: GenService<{
         input: typeof DeleteSandboxRequestSchema;
         output: typeof DeleteSandboxResponseSchema;
     };
+    /**
+     * StopSandbox ends its run and every execution in it and moves it to
+     * CREATED, keeping its VM. Stopping a stopped sandbox returns it as it is.
+     * A sandbox without keep_vm, or one that has ended, fails with
+     * FAILED_PRECONDITION. DeleteSandbox ends a sandbox.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.StopSandbox
+     */
+    stopSandbox: {
+        methodKind: "unary";
+        input: typeof StopSandboxRequestSchema;
+        output: typeof StopSandboxResponseSchema;
+    };
+    /**
+     * StartSandbox queues a run on its kept VM. Starting a queued or running
+     * sandbox returns it as it is. A sandbox without keep_vm, or one that has
+     * ended, fails with FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.StartSandbox
+     */
+    startSandbox: {
+        methodKind: "unary";
+        input: typeof StartSandboxRequestSchema;
+        output: typeof StartSandboxResponseSchema;
+    };
     /**
      * WaitSandbox blocks until the sandbox is in one of the states asked for
      * or the bound passes, as WaitJob does for a job.
@@ -2545,6 +4178,59 @@ export declare const WorkloadService: GenService<{
         input: typeof CancelExecutionRequestSchema;
         output: typeof CancelExecutionResponseSchema;
     };
+    /**
+     * ExecuteCommand runs a command as Execute does, with its standard input
+     * closed, for a client that cannot stream a request, such as a browser.
+     * The stream answers as Execute's does: the execution's ID, then its
+     * output, and last its exit. The execution is one of Execute's:
+     * CancelExecution stops it, and a request_key retry of either call
+     * replays it.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ExecuteCommand
+     */
+    executeCommand: {
+        methodKind: "server_streaming";
+        input: typeof ExecuteCommandRequestSchema;
+        output: typeof ExecuteCommandResponseSchema;
+    };
+    /**
+     * AnswerPrompt answers a prompt an agent workload waits on, one of its
+     * job's, sandbox's or service's waiting, and returns the
+     * AGENT_ANSWERED event that records the answer and who gave it. The
+     * prompt leaves waiting, and the event reaches the agent through Toshi.
+     * Only a person answers: a call that acts for no person, such as a
+     * workload's own token, fails with PERMISSION_DENIED. A prompt is
+     * answered once: a prompt that is not waiting, answered or ended with
+     * the workload's run, fails with FAILED_PRECONDITION. An approval is
+     * answered "approved" or "denied", a question with options one of them,
+     * and one without options any text of 1 to 4096 bytes; another answer
+     * fails with INVALID_ARGUMENT.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.AnswerPrompt
+     */
+    answerPrompt: {
+        methodKind: "unary";
+        input: typeof AnswerPromptRequestSchema;
+        output: typeof AnswerPromptResponseSchema;
+    };
+    /**
+     * EmitWorkloadEvent appends an event to a job's, sandbox's or service's
+     * event log, as its guest emits one, and returns it: type EMITTED, the
+     * name given and data. The workload need not be running. The name is 1
+     * to 200 bytes of UTF-8 with no space or control character, and its first
+     * dot-separated segment is none Toshi keeps for its own events (job,
+     * sandbox, run, service, recording, agent, takeover, spend, egress, host,
+     * github, webhook, trigger and mail); data is empty or JSON of at most
+     * 64 KiB. Another fails with INVALID_ARGUMENT, and an unknown workload
+     * with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.EmitWorkloadEvent
+     */
+    emitWorkloadEvent: {
+        methodKind: "unary";
+        input: typeof EmitWorkloadEventRequestSchema;
+        output: typeof EmitWorkloadEventResponseSchema;
+    };
     /**
      * WatchTelemetry streams a sandbox's resource samples as its host reports
      * them, in cursor order: the samples kept after a cursor, then each one as
@@ -2626,6 +4312,50 @@ export declare const WorkloadService: GenService<{
         input: typeof RevokePreviewShareLinkRequestSchema;
         output: typeof RevokePreviewShareLinkResponseSchema;
     };
+    /**
+     * CreateServiceShareLink mints a share link for one of a service's
+     * provided names: its front channel's, unless the request names another
+     * of its http channels. The link admits one device, the first to open
+     * it, until it expires, carries its byte cap or is revoked, on whichever
+     * run of the service is running, across restarts and redeploys. The link
+     * is in this answer only. The call fails with FAILED_PRECONDITION when
+     * this server serves no provided names, when the service has none, or
+     * when the workspace's plan turns share links off; with NOT_FOUND for a
+     * channel that is not an http channel of the service's current revision;
+     * and with INVALID_ARGUMENT for an expiry or a byte cap above the plan's.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.CreateServiceShareLink
+     */
+    createServiceShareLink: {
+        methodKind: "unary";
+        input: typeof CreateServiceShareLinkRequestSchema;
+        output: typeof CreateServiceShareLinkResponseSchema;
+    };
+    /**
+     * ListServiceShareLinks returns a service's share links, for all of its
+     * channels, the oldest first, never with the link itself.
+     *
+     * A page holds 100 share links when page_size is zero, and 1000 at most.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ListServiceShareLinks
+     */
+    listServiceShareLinks: {
+        methodKind: "unary";
+        input: typeof ListServiceShareLinksRequestSchema;
+        output: typeof ListServiceShareLinksResponseSchema;
+    };
+    /**
+     * RevokeServiceShareLink revokes a service's share link: it admits no
+     * device again, and its open connections end within seconds. Revoking a
+     * link that was revoked or has ended returns it as it is.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.RevokeServiceShareLink
+     */
+    revokeServiceShareLink: {
+        methodKind: "unary";
+        input: typeof RevokeServiceShareLinkRequestSchema;
+        output: typeof RevokeServiceShareLinkResponseSchema;
+    };
     /**
      * CreateService creates a service with its recipe as revision 1 and
      * returns it, created and not started: StartService starts it.
@@ -2661,8 +4391,25 @@ export declare const WorkloadService: GenService<{
         output: typeof ListServicesResponseSchema;
     };
     /**
-     * UpdateService changes the fields the mask names and returns the
-     * service. Only "labels" can be changed; another path fails with
+     * UpdateService changes the field the mask names and returns the
+     * service. The mask names one path: "labels", or "spec.recipe", which
+     * deploys service.spec.recipe as the service's next revision and selects
+     * it. A deploy stops a live run of another revision, so a started
+     * service's next run runs the new recipe; a stopped service runs it once
+     * started. On a started service the deploy opens the revision's upgrade
+     * window (ServiceRevision.upgrade): a run of the revision that fails in
+     * it, or one not ready when it ends, rolls the service back to the
+     * revision it replaced and restores the state volume's version saved at
+     * the deploy. A recipe that does not parse, or of another template,
+     * fails with INVALID_ARGUMENT, as does another path. "spec.visitors"
+     * sets who the service's verified customer domains admit: OPEN serves a
+     * visitor with neither a session nor a share link, with empty identity
+     * headers, on its customer domains only, and a plan whose
+     * domains.open_requests_per_minute is 0 refuses it with
+     * FAILED_PRECONDITION. Setting the value the service has changes
+     * nothing. "spec.host_kinds" sets the kinds of host its runs may use, in
+     * order (ServiceSpec.host_kinds), its still-queued runs included; an empty
+     * list takes any kind, and a repeated or unspecified kind fails with
      * INVALID_ARGUMENT.
      *
      * @generated from rpc toshi.workspace.v1.WorkloadService.UpdateService
@@ -2794,6 +4541,225 @@ export declare const WorkloadService: GenService<{
         input: typeof ReleaseServiceRequestSchema;
         output: typeof ReleaseServiceResponseSchema;
     };
+    /**
+     * SetServiceAlarm creates or replaces the service's alarm with this name
+     * and returns it. At each instant of its schedule an alarm publishes its
+     * event, with its data, on one of the service's event channels. Replacing
+     * an alarm raises its generation and schedules it again from now. A
+     * schedule, zone, channel, event or data that is not valid fails with
+     * INVALID_ARGUMENT, as does an event name under a prefix Toshi keeps for
+     * its own events; a channel the service does not declare fails with
+     * NOT_FOUND; a service holding 100 alarms refuses another with
+     * RESOURCE_EXHAUSTED.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.SetServiceAlarm
+     */
+    setServiceAlarm: {
+        methodKind: "unary";
+        input: typeof SetServiceAlarmRequestSchema;
+        output: typeof SetServiceAlarmResponseSchema;
+    };
+    /**
+     * GetServiceAlarm returns one alarm and its most recent occurrences,
+     * newest first. An unknown name fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.GetServiceAlarm
+     */
+    getServiceAlarm: {
+        methodKind: "unary";
+        input: typeof GetServiceAlarmRequestSchema;
+        output: typeof GetServiceAlarmResponseSchema;
+    };
+    /**
+     * ListServiceAlarms returns the service's alarms by name.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ListServiceAlarms
+     */
+    listServiceAlarms: {
+        methodKind: "unary";
+        input: typeof ListServiceAlarmsRequestSchema;
+        output: typeof ListServiceAlarmsResponseSchema;
+    };
+    /**
+     * DeleteServiceAlarm removes an alarm and its occurrences. Messages it
+     * already published stay on the channel.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.DeleteServiceAlarm
+     */
+    deleteServiceAlarm: {
+        methodKind: "unary";
+        input: typeof DeleteServiceAlarmRequestSchema;
+        output: typeof DeleteServiceAlarmResponseSchema;
+    };
+    /**
+     * PauseServiceAlarm stops an alarm publishing until it is resumed.
+     * Pausing a paused alarm changes nothing.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.PauseServiceAlarm
+     */
+    pauseServiceAlarm: {
+        methodKind: "unary";
+        input: typeof PauseServiceAlarmRequestSchema;
+        output: typeof PauseServiceAlarmResponseSchema;
+    };
+    /**
+     * ResumeServiceAlarm starts a paused alarm again from the next instant
+     * of its schedule; instants that passed while it was paused are not
+     * published. An alarm with a single instant that has passed stays
+     * without a next instant. Resuming an alarm that is not paused changes
+     * nothing.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ResumeServiceAlarm
+     */
+    resumeServiceAlarm: {
+        methodKind: "unary";
+        input: typeof ResumeServiceAlarmRequestSchema;
+        output: typeof ResumeServiceAlarmResponseSchema;
+    };
+    /**
+     * RunServiceAlarmNow publishes the alarm's event once, now, paused or
+     * not, and returns the occurrence. It does not move the alarm's next
+     * instant.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.RunServiceAlarmNow
+     */
+    runServiceAlarmNow: {
+        methodKind: "unary";
+        input: typeof RunServiceAlarmNowRequestSchema;
+        output: typeof RunServiceAlarmNowResponseSchema;
+    };
+    /**
+     * StartServiceSignIn runs one of the service's recipe's sign_in programs
+     * and streams what it writes until it ends: the started message names
+     * the sign-in and when it is stopped, the output messages carry its
+     * stdout and stderr, and the ended message says how it ended. A sign-in
+     * may run for 15 minutes; past that the command is cancelled and the
+     * sign-in ends TIMED_OUT. Only one sign-in of a program runs at a time:
+     * a second fails with FAILED_PRECONDITION while the first is under way.
+     * The output is streamed only and never stored.
+     *
+     * A sign-in is answered with AnswerServiceSignIn and ends early with
+     * CancelServiceSignIn; its stream ending for another reason, as a client
+     * that leaves, also ends it, cancelled. An unknown service or a program
+     * its recipe does not declare fails with NOT_FOUND; a service that is
+     * not running fails with FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.StartServiceSignIn
+     */
+    startServiceSignIn: {
+        methodKind: "server_streaming";
+        input: typeof StartServiceSignInRequestSchema;
+        output: typeof StartServiceSignInResponseSchema;
+    };
+    /**
+     * AnswerServiceSignIn writes one line to a running sign-in's standard
+     * input, from any control plane process: the sign-in's program reads it.
+     * The answer is one line of at most 4 KiB, with no newline in it, and is
+     * never stored. An answer to a sign-in that is not under way fails with
+     * NOT_FOUND; a text that is not one line, or is longer, with
+     * INVALID_ARGUMENT.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.AnswerServiceSignIn
+     */
+    answerServiceSignIn: {
+        methodKind: "unary";
+        input: typeof AnswerServiceSignInRequestSchema;
+        output: typeof AnswerServiceSignInResponseSchema;
+    };
+    /**
+     * CancelServiceSignIn ends a running sign-in: its program is cancelled
+     * and its stream ends CANCELLED. It returns once the cancel is asked
+     * for, not once the sign-in has ended, and works from any control plane
+     * process. Cancelling a sign-in that is not under way fails with
+     * NOT_FOUND; one that has ended changes nothing.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.CancelServiceSignIn
+     */
+    cancelServiceSignIn: {
+        methodKind: "unary";
+        input: typeof CancelServiceSignInRequestSchema;
+        output: typeof CancelServiceSignInResponseSchema;
+    };
+    /**
+     * GetServiceSignInStatus runs the status commands of the service's
+     * recipe and reports, for each sign_in program, whether it is signed in
+     * and what its status command wrote. program names one program; empty
+     * asks for every program the recipe declares, in its order. Each command
+     * runs for 30 seconds at most, past which it is not signed in. An output
+     * is cut at 4 KiB, ending with "[cut]". The status is not stored.
+     *
+     * An unknown service or a program its recipe does not declare fails with
+     * NOT_FOUND; a service that is not running fails with
+     * FAILED_PRECONDITION.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.GetServiceSignInStatus
+     */
+    getServiceSignInStatus: {
+        methodKind: "unary";
+        input: typeof GetServiceSignInStatusRequestSchema;
+        output: typeof GetServiceSignInStatusResponseSchema;
+    };
+    /**
+     * ListServiceRevisions returns a service's revisions, newest first, a
+     * page at a time. An unknown ID fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ListServiceRevisions
+     */
+    listServiceRevisions: {
+        methodKind: "unary";
+        input: typeof ListServiceRevisionsRequestSchema;
+        output: typeof ListServiceRevisionsResponseSchema;
+    };
+    /**
+     * GetServiceRevision returns one revision of a service. An unknown ID or
+     * number fails with NOT_FOUND.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.GetServiceRevision
+     */
+    getServiceRevision: {
+        methodKind: "unary";
+        input: typeof GetServiceRevisionRequestSchema;
+        output: typeof GetServiceRevisionResponseSchema;
+    };
+    /**
+     * RollbackService selects revision, a revision the service already has,
+     * as its current one, and stops its live run, so the next run starts on
+     * it: the recipe comes back, and the mode, size, state volume and secret
+     * values do not change. No revision is made. expected_revision, when
+     * set, must be the selected revision, else FAILED_PRECONDITION naming
+     * the selected one; so is a revision already selected, and a revision
+     * outside the window (ServiceRevision.eligible), with its reason. An
+     * unknown revision is NOT_FOUND. Before anything is selected, the
+     * registry of the revision's container image is asked whether it still
+     * serves the revision's digest, with the recipe's registry login; the
+     * answer is stored on the revision (ServiceRevision.image_check). A
+     * registry that answers it does not is FAILED_PRECONDITION with
+     * ErrorInfo reason IMAGE_NOT_SERVED and the registry's status; one that
+     * cannot be reached, refuses the login or fails is FAILED_PRECONDITION
+     * with reason IMAGE_CHECK_FAILED and its answer. The next run pulls the
+     * revision's image by its digest: nothing is resolved again or built.
+     * The answer carries the activation, whose outcome follows the
+     * revision's next run (ListServiceActivations).
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.RollbackService
+     */
+    rollbackService: {
+        methodKind: "unary";
+        input: typeof RollbackServiceRequestSchema;
+        output: typeof RollbackServiceResponseSchema;
+    };
+    /**
+     * ListServiceActivations returns each time a revision of the service was
+     * selected, by its create, a deploy or a rollback, newest first, a page
+     * at a time, with what came of it.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ListServiceActivations
+     */
+    listServiceActivations: {
+        methodKind: "unary";
+        input: typeof ListServiceActivationsRequestSchema;
+        output: typeof ListServiceActivationsResponseSchema;
+    };
     /**
      * ListServiceRuns returns a service's runs, the newest first: each run
      * is a job on a host, of the revision that was current when it was
@@ -2811,6 +4777,8 @@ export declare const WorkloadService: GenService<{
     /**
      * ListEvents returns the events after a cursor, oldest first, a page at a
      * time, for a client that polls or catches up after downtime.
+     * A kept VM discarded for an image change has type KEPT_VM_DISCARDED,
+     * with its run and reason under kept_vm_discarded.
      *
      * A page holds 50 events when page_size is zero, and 500 at most.
      *
@@ -2821,6 +4789,27 @@ export declare const WorkloadService: GenService<{
         input: typeof ListEventsRequestSchema;
         output: typeof ListEventsResponseSchema;
     };
+    /**
+     * ExportEvents streams the selected events as JSON lines, oldest first,
+     * without a row cap. The first line is {"header":{"since":...,"until":...,
+     * "retention_boundary":...|null,"crossed":true|false}}, followed by one
+     * Event per line. The plan must include event export or the call fails with
+     * PERMISSION_DENIED. Project and environment are required as in ListEvents.
+     *
+     * Since is required; until defaults to now. Since must be before until,
+     * else INVALID_ARGUMENT. A cursor from a previous response resumes after
+     * its last row, sending the header again. A malformed cursor or one from
+     * another range or filter fails with INVALID_ARGUMENT; a resume cursor at
+     * or behind the retention boundary fails with OUT_OF_RANGE. When resuming
+     * without an until, the cursor keeps the original range's until.
+     *
+     * @generated from rpc toshi.workspace.v1.WorkloadService.ExportEvents
+     */
+    exportEvents: {
+        methodKind: "server_streaming";
+        input: typeof ExportEventsRequestSchema;
+        output: typeof ExportEventsResponseSchema;
+    };
     /**
      * WatchEvents streams the events after a cursor, then each new event as
      * it is written, for a client that stays connected.